Novell Sentinel Rapid Deployment 6.1, Installation Manual

Page: 81 / 84

Manually Configuring Sentinel 6.1 Rapid Deployment Server for LDAP Authentication
C
81
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
C
Manually Configuring Sentinel 6.1
Rapid Deployment Server for
LDAP Authentication
You can manually configure the Sentinel 6.1 Rapid Deployment server for LDAP-based
authentication. Users can use either their eDirectory
TM
or Active Directory* credentials to login to
the Sentinel 6.1 Rapid Deployment server.
To configure the Sentinel server by using the
ldap_auth_config.sh
script, see
1 Login to the Sentinel 6.1 Rapid Deployment server.
2 Change the directory to
/opt/novell/< Install_Directory >/config
:
cd /opt/novell/< Install_Directory >/config
3 Open the file
auth.login
in a text editor.
vi auth.login
4 Modify the entry
LdapLogin
as follows:
4a Change the class name of the login module from
esecurity.ccs.auth.jaas.LdapLoginModule
to
com.sun.security.auth.module.LdapLoginModule
.
4b Add the following parameters after the word
required
and before the ending semicolon
by separating them with white space:
 userProvider="< url >" where < url > is the LDAP url used to refer the eDirectory
subtree containing the user population. For example; " ldap://192.168.0.1:636/
o=users ". If the entire tree is to be searched, remove the subtree specification (the
/
o=users
part).
IMPORTANT: You cannot remove the
/o=users
parameter if you are using Active
Directory.

userFilter="(&(uid={USERNAME})(objectclass=inetOrgPerson))"
for
eDirectory and
userFilter="(&(sAMAccountName={USERNAME})(objectclass=user))"
for
Active Directory.

useSSL=true