Example: LDAP Role Computation

By setting the appropriate combination of options in the <installation directory>\EAServer\Repository\CSI\conf\default.xml file, you can achieve integration with a wide variety of LDAP schemas.

Example configuration

The following sample configuration for the authentication provider illustrates how to integrate with a SunONE schema. 


	<config:authenticationProvider	name="com.sybase.security.ldap.LDAPLoginModule">	
		<options name="DefaultSearchBase" value="dc=sybase,dc=com" />
		<options name="ProviderURL" value="ldap://localhost:389/" />
		<options name="BindDN" value="cn=manager,dc=sybase,dc=com" />
		<options name="BindPassword" value="AdM1n1" />
		<options name="ServerType" value="sunone5" />
		<options name="AuthenticationFilter" value="(&amp;(cn={uid})(objectclass=person))" />
		<options name="RoleSearchBase" value="dc=sybase,dc=com" />
		<options name="RoleFilter" value="(&amp;(objectclass=ldapsubentry)(objectclass=nsroledefinition))" />
		<options name="UserRoleMembershipAttribute" value="nsRoleDN" />
		<options name="enableCertificateAuthentication" value="false" />
	</config:authenticationProvider>
Parent topic: LDAP Security
Related concepts
LDAP Role Computation
Related reference
LDAP Configuration Properties

Send your feedback on this help topic to Sybase Technical Publications: pubs@sybase.com

Your comments will be sent to the technical publications staff at Sybase, Inc. For product-related issues or technical support, contact Sybase Technical Support at 1-800-8SYBASE.