Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To access LDAP configuration settings, select LDAP Configuration under the Administration section. (This page is visible only for License Statistics administrator users.) The following sections describe how to configure LDAP using the LDAP Configuration page. Also see Importing LDAP user groups for more details on this topic.

Setting up a connection to LDAP

In To set up a connection to LDAP, in the General section of the LDAP Configuration page: 

  1. Enter the appropriate information for connecting to your LDAP server. An example setup is shown in the screenshot below.   
    1. LDAP Host: The hostname of the LDAP server.
    2. Port: The port for the LDAP server. The default is 389.
    3. Use SSL: Check this box if you would like to connect to your LDAP server over SSL protocol. If using SSL, see Enabling LDAP over SSL for further setup information.
    4. Base DN: The base DN (Distinguished Name) under which to search for users and groups. (See Testing LDAP settings for more information on obtaining the base DN.)
    5. Manager DN: The DN for the manager account to be used for initial binding (authentication).
    6. Manager Password: The password for the manager account.

  2. Click Verify to ensure that your connection to the LDAP server works as expected. A message will indicate whether the test was successful. If the test is not successful, make the needed changes to the setup, save the changes, and retest the connection.
    Image Removed(See Testing LDAP settings for more information on verifying your LDAP settings.)
    Image Added
  3. Click Save at the bottom of the LDAP Configuration page to save the LDAP configuration.

Anchor
enableLDAPImport
enableLDAPImport
Enabling LDAP import

License Statistics lets you import user details and groups you have defined in an LDAP directory. Importing your user groups from LDAP eliminates the need to create user groups manually, which can be time consuming if you have a large number of users.  For more information, see Importing LDAP user groups.

To enable LDAP import:

  1. Check the "Enable LDAP Users Import" checkbox to enable importing user groups you have defined in an LDAP directory.
  2. Optionally, you may enter a filter for the import to limit the data that is imported.
  3. Click Verify to ensure that your connection to the LDAP server works as expected. A message will indicate whether the test was successful. If the test is not successful, make the needed changes to the setup, save the changes, and retest the connection.
  4. Click Save at the bottom of the LDAP Configuration page to save the LDAP configuration.


Info

Note that not all users matching the Base DN will be imported, but only those that were already monitored by License Statistics. Also, a group will be imported from LDAP only if it contains at least one user that is monitored by License Statistics.

Example:

Say you have the following users and groups in your configuration:

  • User1 belongs to Group1 and Group2 in LDAP, and is monitored by License Statistics
  • User2 belongs to Group2 and Group3 in LDAP, but is not monitored by License Statistics

Given this scenario, License Statistics will import:

  • User1 with his LDAP details
  • Group1 with member User1
  • Group2 with member User1

License Statistics will not import:

  • User2
  • Group3


Anchor
autoAcctCreationLDAP
autoAcctCreationLDAP

...

Enabling LDAP authentication

You can automate enable License Statistics user authentication and optionally allow for automated License Statistics user account creation using the user accounts you already have defined in an LDAP directory.

Enabling automatic account creation using LDAP eliminates the potentially time-consuming task of adding users manually in License Statistics. With the LDAP option enabled, users simply log into License Statistics using their username and password that is stored in Active Directory, regardless whether the user has an account in License Statistics.

If LDAP authentication is enabled, you can also use LDAP authentication when creating new users.

To enable automatic user account creation authentication using LDAP:

  1. Check the "Automatic Enable LDAP Authentication" checkbox

  2. Optionally, check the "Enable automatic account creation using LDAP" checkbox to enable importing user groups you have defined in an LDAP directoryif you want to automatically create accounts using LDAP.


    Info

    If "Enable LDAP Authentication" is selected and "Enable automatic account creation using LDAP" is not selected (which is the default), all users that have accounts connected to LDAP will be authenticated, but no new accounts will be created, even if the LDAP credentials are valid.

    Similarly, if you disable LDAP authentication, users who have already logged into License Statistics using their Active Directory will retain the ability to use their login, but no new login attempts using LDAP user accounts will be possible.


  3. Optionally, you may can enter a filter for the import to limit the that limits the accounts that are allowed to authenticate and are automatically created.

  4. Click Verify to ensure that your connection to the LDAP server works as expected. A message will indicate whether the test was successful. If the test is not successful, make the needed changes to the setup, save the changes, and retest the connection.

If you turn the LDAP account creation option off, and you have turned on the users who have already logged into License Statistics using their Active Directory user will retain the ability to use their login. However, no new login attempts using LDAP user accounts will be possible.

If you have enabled LDAP, when you create users you can check the Authenticate through LDAP option for user authentication (see Creating a new user in Managing License Statistics users).

Warning
If you subsequently disable LDAP, the user logins will fail.

  1. Click Save at the bottom of the LDAP Configuration page to save the LDAP configuration.