Some information on this page refers to License Statistics v5.1 or newer, which added the ability to connect to an LDAP server over SSL protocol. If you are using an earlier version of License Statistics, see v4.18 to v5.1 documentation or refer to documentation for versions prior to v4.18. |
License Statistics lets you connect to an LDAP server to access user accounts (see Automating user account creation using LDAP) and user groups you have defined in an LDAP directory (see Importing LDAP user groups).
Currently, License Statistics has been tested only with Microsoft Active Directory. You may use other LDAP directories, but they are untested with License Statistics at this time. The following instructions for setting up LDAP apply to Active Directory, but may be used as a basis for connecting to other LDAP directories.
To set up connection to LDAP:
By default, LDAP traffic is transmitted unsecured. You can, however, make LDAP traffic confidential by installing a valid certificate issued by a certificate authority (CA). The CA certificate, which contains a public key and the identity of the owner, is needed to enable encrypted communication between License Statistics and your LDAP server.
To connect over SSL:
If you want to verify that the LDAP server's certificate is properly signed:
If you do not want to verify that the LDAP server's certificate is properly signed:
Note: We recommend using the predefined settings and leaving the variable LDAP_SSL_CERTIFICATE_VERIFY set to "demand" so you can perform the validation of the LDAP server's certificate using your CA file.
A tool such as JXplorer is an excellent way to test your LDAP settings. Using such a tool can save a lot of time when configuring License Statistics, because you can test that credentials and other settings are correct.
You can use JXplorer to copy the DN from LDAP. To do this:
1. Log into JXplorer as shown below.
2. After logging into JXplorer, use the Copy DN option to copy the base DN. When selecting the base DN, it's important to choose the path in the tree that contains the groups you want to see in License Statistics for reporting usage.
3. After copying the base DN, you can simply paste the string into License Statistic's Base DN field instead of typing it.
To learn more about LDAP, see http://en.wikipedia.org/wiki/LDAP.