EVOLUTION-MANAGER

Edit File: LdapAndADS.html

<!doctype html>

<html  xml:lang="en" lang="en">
        <head>
    <meta charset="UTF-8" />
    <title>Apache OpenMeetings Project &#x2013; LDAP and Active Directory Integration</title>
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="description" content="" />
      <meta http-equiv="content-language" content="en" />
                                                        <link href="./css/themes/cerulean/bootstrap.min.css" rel="stylesheet" />
    <link href="./css/fontawesome/all.min.css" rel="stylesheet" />
    <link href="./css/reflow-skin.css" rel="stylesheet" />
    
    <link rel="stylesheet" href="./js/styles/github.min.css" />

# The following lines specify the data of the ldap user with 
# read privileges to the user entries according to the LDAP DB.
ldap_admin_dn=cn=openmeetings,ou=system-users,dc=mydomain,dc=org
ldap_passwd=12345

# The following line specifies where to search for users wanting to login 
ldap_search_base=ou=users,dc=mydomain,dc=org

# The attribute in the LDAP DB which will be matched against the 
# given login data ("Username or mail address" field) in OpenMeetings:
ldap_search_query=(uid=%s)

# the scope of the search might be: OBJECT, ONELEVEL, SUBTREE
ldap_search_scope=ONELEVEL

# Ldap auth type(NONE, SEARCHANDBIND, SIMPLEBIND)
#  When using SIMPLEBIND a simple bind is performed on the LDAP server to check user authentication
#  When using NONE, the Ldap server is not used for authentication
ldap_auth_type=SIMPLEBIND

# userDN format, will be used to bind if ldap_auth_type=SIMPLEBIND
# might be used to get provisionningDn in case ldap_auth_type=NONE
ldap_userdn_format=uid=%s,ou=users,dc=mydomain,dc=org

# Ldap provisioning type(NONE, AUTOCREATE, AUTOUPDATE)
ldap_provisioning=AUTOCREATE

# Ldap deref mode (never, searching, finding, always)
ldap_deref_mode=always

#  Set this to 'true' if you want to use admin_dn to get user attributes
#  If any other value is set, user_dn will be used
ldap_use_admin_to_get_attrs=true

# Ldap-password synchronization to OM DB
#  Set this to 'true' if you want OM to synchronize the user Ldap-password to OM's internal DB
#  If you want to disable the feature, set this to any other string.
#  Defautl value is 'true'
ldap_sync_password_to_om=true

# Ldap group mode (NONE, ATTRIBUTE, QUERY)
# NONE means group associations will be ignored
# ATTRIBUTE means group associations will be taken from 'ldap_group_attr' attribute (M$ AD mode)
# QUERY means group associations will be taken as a result of 'ldap_group_query' query
ldap_group_mode=NONE

ldap_group_query=(&amp;(memberUid=%s)(objectClass=posixGroup))

# Ldap user attributes mapping
# Set the following internal OM user attributes to their corresponding Ldap-attribute
ldap_user_attr_login=uid
ldap_user_attr_lastname=sn
ldap_user_attr_firstname=givenName
ldap_user_attr_mail=mail
ldap_user_attr_street=streetAddress
ldap_user_attr_additionalname=description
ldap_user_attr_fax=facsimileTelephoneNumber
ldap_user_attr_zip=postalCode
ldap_user_attr_country=co
ldap_user_attr_town=l
ldap_user_attr_phone=telephoneNumber
# optional attribute for user picture
#ldap_user_attr_picture=
ldap_group_attr=memberOf

# optional, absolute URL will be used as user picture if #ldap_user_attr_picture will be empty
#ldap_user_picture_uri=picture_uri

# Ldap ignore upper/lower case, convert all input to lower case
ldap_use_lower_case=false

# Ldap import query, this query should retrieve all LDAP users
ldap_import_query=(objectClass=inetOrgPerson)

</pre> 
     </div> 
    </div> <p>NOTE: Directory Servers are individual for every organization, and might use different attribute names than the ones listed in the example config. Please obtain the information about the structure and attribute names of the entries and adjust the config file accordingly.</p> <p>It is important to configure LDAP_SEARCH_PATH so that it points to the node of the LDAP directory server that contains the users.</p> <p>If there are multiple search paths you can either try to define a search path that points to multiple nodes or define multiple LDAP configurations in the LDAP administration pane of OpenMeetings.</p> </li> 
  </ul> 
 </section> 
 <section> 
  <h3 id="3-configuring-openmeetings-to-use-the-ldap-config-">3. Configuring OpenMeetings to use the ldap config file</h3> 
  <p>The final step binds the config file of the previous section to OpenMeetings:</p> 
  <ul> 
   <li> <p>Log into OpenMeetings as Administrator</p> </li> 
   <li> <p>Open Administration-&gt;LDAP</p> <p><img src="../resources/images/ldap_screen.png" alt="" class="img-fluid"></p> </li> 
   <li> <p>In the right pane of the main window labeled “LDAP Config” set the Name of the LDAP DB which you want to appear in the popup menu right of the “Domain” label of OpenMeeting’s login screen. Any Name can be set here.</p> </li> 
   <li> <p>Check the “Enabled” checkbox to make the LDAP DB available on the login screen.</p> </li> 
   <li> <p>Fill in the field “Config file name” with the file name of the config file from the previous section of this manual (just the file name, without it’s path).</p> </li> 
   <li> <p>Save the Configuration by clicking in the save icon above the “LDAP Config” label and load this setting by clicking in the reload icon right of the save icon.</p> </li> 
   <li> <p>The table in the left pane of OpenMeeting’s LDAP administration window should contain an entry with the ID (autoassigned by OpenMeetings), name and config file.</p> </li> 
  </ul> 
  <p>Test the settings by logging out of Openmeetings and logging back in with a user and password of the LDAP DB. Make sure you select the configured name of the LDAP DB in the “Domain” popup menu of the Login screen before pressing the “Sign in” button. If login doesn’t work, see the section <a href="#ldap-troubleshooting">Troubleshooting</a></p> 
 </section> 
</section> 
<section> 
 <h2 id="additional-optional-steps">Additional (optional) steps</h2> 
 <p>Once login with users from the LDAP DB works, all users of that database can get imported into OpenMeetings internal table of users using the command line tool “admin.sh”:</p> 
 <ul> 
  <li> <p>First test with:</p> <p><code>$OM_HOME/admin.sh -l -d1 --print-only</code></p> <p>The argument of the <code>-d</code> (“domain-id”) flag indicates the ID number of the LDAP DB in the LDAP table on the left pane in OpenMeeting’s Administration-&gt;LDAP configuration. If only one LDAP DB is configured there the ID most probably is 1.</p> <p><code>--print-only</code> indicates that the entries shouldn’t actually get imported, but rather printed out on the terminal.</p> <p>If everything works as expected, a lot of printout should happen on the terminal with the user entries of the LDAP DB appearing last.</p> </li> 
  <li> <p>In that case the entries can actually get imported into OpenMeetings by omitting <code>--print-only</code>:</p> <p><code>$OM_HOME/admin.sh -l -d1</code></p> </li> 
 </ul> 
 <p>After import they can be found in the OpenMeeting website at appopriate places (Invitation into rooms, in the Administration pages of Users, Groups and Conference rooms, etc.).</p> 
 <p>NOTE: It is not strictly necessary to import all users from the LDAP DB: Any user who logs into OpenMeeting for the first time will be added to OpenMeeting’s Users table. For administrative purposes it can nevertheless be very convenient to import all users of an LDAP DB in order to distribute them to different Groups/Rooms without requiring each of them to log in first.</p> 
 <p><a href="#ldap-troubleshooting" id="ldap-troubleshooting"></a></p> 
</section> 
<section> 
 <h2 id="troubleshooting1">Troubleshooting</h2> 
 <p>In case login doesn’t work it is recommended to turn on verbose logging:</p> 
 <ul> 
  <li> <p>stop OM</p> </li> 
  <li> <p>add the following line to <code>$OM_HOME/webapps/openmeetings/WEB-INF/classes/logback-config.xml</code>:</p> <p><code>&lt;logger name="org.apache.directory" level="DEBUG" /&gt;</code></p> </li> 
  <li> <p>restart OM</p> </li> 
  <li> <p>Try to log in using the configured LDAP DB and try to debug the problem by checking the log file. By default, logging is done to the file <code>$OM_HOME/logs/catalina.out</code>.</p> </li> 
 </ul> 
</section> 
<section> 
 <h2 id="footnotes1">Footnotes</h2> 
 <p><sup><a href="#fnr.1" id="fn1">1</a></sup> <code>$OM_HOME</code> is the home folder of the OpenMeetings installation, e.g. <code>/opt/open503</code></p> 
</section>        </main>
        <div class="d-none d-sm-none d-md-none d-lg-none d-xl-block col-xl-2">
            <div id="m-toc-sidebar" class="d-print-none m-toc-sidebar-enabled m-toc-sidebar-expanded m-toc-sidebar-autoexpandable toc-sidebar-fixed">
                <nav id="m-toc-sidebar-nav flex-column">
                <ul class="m-nav--sidebar nav flex-column flex-nowrap">
    <li class="h1">
        <a class="nav-link" href="#ldap-and-active-directory-integration" title="LDAP and Active Directory Integration">LDAP and Active Directory Integration</a>
    </li>
    <li class="h2">
        <a class="nav-link" href="#ldap-configuration-in-openmeetings" title="LDAP Configuration in OpenMeetings">LDAP Configuration in OpenMeetings</a>
    </li>
    <ul class="nav flex-column flex-nowrap nav-collapsible">
            <li class="h3">
        <a class="nav-link" href="#1-information-how-to-access-the-ldap-server-for-us" title="1. Information how to access the LDAP Server for user lookup">1. Information how to access the LDAP Server for user lookup</a>
    </li>
    <li class="h3">
        <a class="nav-link" href="#2-an-ldap-config-file" title="2. An LDAP config file">2. An LDAP config file</a>
    </li>
    <li class="h3">
        <a class="nav-link" href="#3-configuring-openmeetings-to-use-the-ldap-config-" title="3. Configuring OpenMeetings to use the ldap config file">3. Configuring OpenMeetings to use the ldap config file</a>
    </li>
    </ul>
    <li class="h2">
        <a class="nav-link" href="#additional-optional-steps" title="Additional (optional) steps">Additional (optional) steps</a>
    </li>
    <li class="h2">
        <a class="nav-link" href="#troubleshooting1" title="Troubleshooting">Troubleshooting</a>
    </li>
    <li class="h2">
        <a class="nav-link" href="#footnotes1" title="Footnotes">Footnotes</a>
    </li>
                    </ul>
                </nav>
           </div>
        </div>
    </div> 
</div> 
    <div id="m_scrolltop" class="m-scrolltop">
		<i class="fa fa-arrow-up"></i>
    </div>
  
<footer class="footer-light bg-light">
    <div class="container">
        <div class="row">
                        <div class="col bottom-nav">
                <ul class="nav flex-column nav-list">
                    <li class="nav-header">
General
                    </li>
                    <li class="nav-item "><a  href="index.html"  title="Home"  class="nav-link" >Home</a></li>
                    <li class="nav-item "><a  href="https://www.apache.org/licenses/"  title="License"   class="externalLink nav-link" >License</a></li>
                    <li class="nav-item "><a  href="https://www.apache.org/"  title="ASF"   class="externalLink nav-link" >ASF</a></li>
                    <li class="nav-item "><a  href="https://www.apache.org/foundation/sponsorship"  title="Sponsorship"   class="externalLink nav-link" >Sponsorship</a></li>
                    <li class="nav-item "><a  href="https://www.apache.org/foundation/thanks"  title="Thanks"   class="externalLink nav-link" >Thanks</a></li>
                    <li class="nav-item "><a  href="CallForLogo.html"  title="Call For Logo"  class="nav-link" >Call For Logo</a></li>
                    <li class="nav-item "><a  href="NewsArchive.html"  title="News archive"  class="nav-link" >News archive</a></li>
                    <li class="nav-item "><a  href="security.html"  title="Security"  class="nav-link" >Security</a></li>
                    <li class="nav-item "><a  href="commercial-support.html"  title="Commercial Support"  class="nav-link" >Commercial Support</a></li>
                </ul>
            </div>
            <div class="col bottom-nav">
                <ul class="nav flex-column nav-list">
                    <li class="nav-header">
Installation
                    </li>
                    <li class="nav-item "><a  href="installation.html"  title="Installation"  class="nav-link" >Installation</a></li>
                    <li class="nav-item "><a  href="Upgrade.html"  title="Upgrade"  class="nav-link" >Upgrade</a></li>
                    <li class="nav-item "><a  href="InstallMediaServer.html"  title="Media Server Installation"  class="nav-link" >Media Server Installation</a></li>
                    <li class="nav-item "><a  href="https://cwiki.apache.org/confluence/display/OPENMEETINGS/Tutorials+for+installing+OpenMeetings+and+Tools"  title="Tutorials"   class="externalLink nav-link" >Tutorials</a></li>
                    <li class="nav-item "><a  href="CommandLineAdmin.html"  title="Command Line Admin"  class="nav-link" >Command Line Admin</a></li>
                </ul>
            </div>
            <div class="col bottom-nav">
                <ul class="nav flex-column nav-list">
                    <li class="nav-header">
Community
                    </li>
                    <li class="nav-item "><a  href="get-involved.html"  title="Get Involved"  class="nav-link" >Get Involved</a></li>
                    <li class="nav-item "><a  href="team.html"  title="Committers"  class="nav-link" >Committers</a></li>
                    <li class="nav-item "><a  href="OurUsers.html"  title="Our Users"  class="nav-link" >Our Users</a></li>
                    <li class="nav-item "><a  href="mailing-lists.html"  title="Mailing Lists"  class="nav-link" >Mailing Lists</a></li>
                    <li class="nav-item "><a  href="https://cwiki.apache.org/confluence/display/OPENMEETINGS/"  title="Wiki"   class="externalLink nav-link" >Wiki</a></li>
                </ul>
            </div>
            <div class="col bottom-nav">
                <ul class="nav flex-column nav-list">
                    <li class="nav-header">
Development
                    </li>
                    <li class="nav-item "><a  href="scm.html"  title="Source Code"  class="nav-link" >Source Code</a></li>
                    <li class="nav-item "><a  href="issue-management.html"  title="Bugs / Issues"  class="nav-link" >Bugs / Issues</a></li>
                    <li class="nav-item "><a  href="dependencies.html"  title="Dependencies"  class="nav-link" >Dependencies</a></li>
                    <li class="nav-item "><a  href="ci-management.html"  title="Continuous Integration"  class="nav-link" >Continuous Integration</a></li>
                    <li class="nav-item "><a  href="BuildInstructions.html"  title="Build Instructions"  class="nav-link" >Build Instructions</a></li>
                    <li class="nav-item "><a  href="JUnitTesting.html"  title="JUnit Testing"  class="nav-link" >JUnit Testing</a></li>
                    <li class="nav-item "><a  href="ManualTesting.html"  title="Manual Testing"  class="nav-link" >Manual Testing</a></li>
                    <li class="nav-item "><a  href="ReleaseGuide.html"  title="Release Guide"  class="nav-link" >Release Guide</a></li>
                    <li class="nav-item "><a  href="WebsiteGuide.html"  title="Website Guide"  class="nav-link" >Website Guide</a></li>
                </ul>
            </div>
        </div> 
    </div> 
</footer>
  <div class="container subfooter text-center">
    <div class="row">
      <div class="col-md-12">
        <p class="copyright">Copyright &copy;2012-2020
                 <a href="https://apache.org">Apache Software Foundation</a>
. All Rights Reserved.</p>
      </div>
    </div>
  </div>

<script src="./js/jquery.min.js" crossorigin="anonymous"></script>
    <script src="./js/popper.min.js" crossorigin="anonymous"></script>
    <script src="./js/bootstrap.min.js" crossorigin="anonymous"></script>