Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 120 / 374

120 Novell Access Manager 3.1 SP2 Identity Server Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Other: Used for third-party authentication classes or if you have written your own Java
class. For information on how to write your own class, see Novell Access Manager
Developer Tools and Examples (http://developer.novell.com/wiki/index.php/
Novell_Access_Manager_Developer_Tools_and_Examples)
.
4 Click Next to configure the properties for each class. Click New , then enter a name and value.
The names and values you enter are case sensitive. See Section 3.2.2, “Specifying Common
Class Properties,” on page 120 for the properties that are used by the basic and password
classes.
5 Click Finish .
6 Continue with Section 3.3, “Configuring Authentication Methods,” on page 122 .
To use an authentication class, the class must have one or more associated methods.
3.2.2 Specifying Common Class Properties
The following properties can be used by the basic and password classes:

“Query Property” on page 120

“JSP Property” on page 121

“MainJSP Property” on page 122
These properties can also be specified on a method derived from the class. If you are going to create
multiple methods from the same class, consider the following conditions:

If you want the methods to share the same properties, you can save configuration steps by
defining the properties on the class.

If you want the methods to use different values for the properties such as one method
specifying one custom login page and another method specifying a different custom login page,
then you should specify the properties on the method.
Query Property
Normally, the Identity Server uses the username to find a user in the user store. You can change this
behavior by using the Query property. This property determines the username value for
authentication. The default Query string prompts the users for the value of the CN attribute. You can
modify this by requesting a different attribute in the LDAP query.
The Query property can be used by the following classes:

BasicClass
 PasswordClass

ProtectedBasicClass
 ProtectedPasswordClass
For example, to query for the user’s UID attribute to use for the username, you would specify the
following query:
Property Name: Query
Property Value:
(&(objectclass=person)(uid=%Ecom_User_ID%))