LDAP User Authentication

Replication Server supports the use of LDAP as an additional security mechanism for user authentication.

LDAP user authentication allows client applications to send user name and password information to Replication Server for authentication by the LDAP server instead of Replication Server.

Use LDAP user authentication to simplify and centralize user administration, or to avoid unnecessary login problems for user administration.

Replication Server uses OpenLDAP client APIs to communicate with the LDAP server for user authentication. The OpenLDAP API, which is precompiled with OpenSSL, is dynamically loaded from a shared library, libsybaseldap*, found in the $SYBASE/$OCS/lib3p or $SYBASE/$OCS/lib3p64 directory.

To use LDAP user authentication:

  1. In the configure replication server command, set the authentication mechanism with the user_authentication_source parameter.

  2. In the sysadmin ldap command, set the LDAP URL with search filter for login name, distinguished name (DN), and password of an LDAP server administrator.

Note: When the LDAP authentication is enabled, a valid user account must exist in Replication Server.

See LDAP User Authentication Configuration and Replication Server and LDAP User Account Management in the Replication Server Administration Guide: Volume 1.

See configure replication server and sysadmin ldap in the Replication Server Reference Manual.

Parent topic: Improvements to Security