LIFERAY

LDAP INTEGRATION

Integration of LDAP with liferay. 

1. Download ApcheDS  and install it  http://archive.apache.org/dist/directory/apacheds/stable/1.0/

2. Download LDAP browser and Install it  http://jxplorer.org/downloads/users.html

    Note: It is an interface for creating organizations, group and users in Apache Directory Server.

3. We can create organizations, group and users in Apache Directory Server through other interfaces also.

4. Go to Apache DS and create the connection using the following step

Create connection

The bottom left corner shows all of the LDAP connections. As can be seen, the view is empty, meaning a connection still needs to be specified.

To create a new connection click the New Connection button.

In the wizard's first page enter a connection name as well as the hostname and the port of the LDAP server. To check the connection parameter you entered you may click to Check Network Parameter. Click Next when done.

Here is a list of common directory servers and the ports they use by default:

Directory Server	Default Port
Apache Directory Server	10389
OpenDS	1389
OpenLDAP, Fedora, Sun, Active Directory	389

In the wizard's second page select the authentication method. If you choose the simple bind method also enter your bind DN or user and bind password. To check the authentication parameter you entered you may click to Check Authentication. Click Finish when done.

Here is a list of common directory servers and the administrator's bind DN and password they use by default:

Directory Server	Default Bind DN	Default Bind Password
Apache Directory Server	uid=admin,ou=system	secret
OpenDS, Sun, Fedora	cn=Directory Manager	specified at setup
OpenLDAP	specified at setup, see slapd.conf	specified at setup, see slapd.conf

Observe that the Connections view now shows the created connection.

Input Users in LDAP Browser

1.       Open the LDAP browser.

2.       Click File>Connect. Following window will open

3.   Enter localhost as Host, Change the port to 10389.

4. Protocol as LDAP v3 and Enter the Base DN as  ou=system (ou = organization unit)

5      In the Level drop-down menu, choose User+Password.

6.    Insert uid=admin,ou=system in the User DN input field.

7.    The password is secret.

8.    Click Save and enter any name for the template.

9.     Right click on System->users and click New.

 

10. Enter the RDN field as  cn=user1

9.     Add top, person, organizationalPerson and InterOrgPerson classes for denoting as user to the Selected Class. And click ok

10.     It will open in table editor, in that fill the mandatory values cn and sn. Where cn=user1 and sn=user1

11. Then fill givenName: user1, mail: user1@liferay.com , title:"" and userPassword: test fields and click submit.
12.All the above mentioned fields are mandatory for liferay table. So create all the above mentioned fields for user and submit it. User is created successfully if u enter all valid and mandatory details.

Now integrate with Liferay using following steps:

      Login as a Administrator

         Go to Control Panel->PortalSettings->Authentication->LDAP

            Check  the Enable Box

            If the Required box is checked only users in the LDAP server will be able to log into Liferay Portal

            Click add LDAP Server if you are using for first time or if you are creating new connection

           Choose Default Value Apache Directory Server. 

 

    7. Check Connection, provide given values and Test LDAP Connection

        BaseProviderURL:   ldap://localhost:10389

        BaseDN:  ou=system

        Principal:  uid=admin,ou=system

       Credential:  secret        

           

   8.  Click on Test LDAP Connection

        If a successful message is returned, the connection with LDAP is successful otherwise check the details and  debugs the issue.

    9. Test whether the users added in LDAP are viewable here. To do this click on Test LDAP Users, you should get all the user details which u created in LDAP server