Creating and Assigning a Test Security Configuration

John creates a new security configuration to authenticate and authorize application users. John creates this security provider to test application-layer security before importing the package into the production environment.

1. Click Security in the navigation pane, and General in the administration pane, then click New.
2. In Create Security Configuration, name the security configuration AcmeAppSecurity, then click OK.
3. In the navigation pane, expand the Security folder and click the new security configuration node.
4. In the administration pane, click the Authentication tab then click New to add a new LDAP security provider.
5. Select com.sybase.security.ldap.LDAPLoginModule as the login module.
6. Configure the LDAP properties.
   The AuthenticationSearchBase and RoleSearchBase properties ensure that only users and groups in the AcmeCorp organization unit are allowed access to Acme data.

   Property	Value
   BindDN	cn=Directory Manager
   BindPassword	secret
   AuthenticationSearchBase	ou=AcmeCorp,ou=users,dc=example,dc=com
   DefaultSearchBase	dc=example,dc=com
   ProviderURL	ldap://localhost:10389
   RoleMemberAttributes	uniquemember
   RoleSearchBase	ou=AcmeCorp,ou=groups,dc=example,dc=com
   AuthenticationScope	onelevel
   ServerType	openldap
   RoleScope	onelevel

7. Click OK.
8. In the Authentication, Authorization, and Attribution tabs, delete NoSecLoginModule, NoSecAuthorizer, and NoSecAttributer, respectively.
9. In the General tab, click Validate.
   A confirmation message displays upon success.
10. If the validation is successful, click Apply.
11. Assign the security configuration to default domain so the security configuration can be tested in the test environment.
    1. Expand the Domains folder, then click Security.
    2. Click General tab, then click Assign.
    3. Select AcmeAppSecurity.
    4. Click OK.