Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Gliffy
size450
nameLDAP authentication process
pagePin1

 

This makes it possible to authenticate users from a corporate directory at the server via LDAP.

(info)(info) Some PowerFolder Server relevant user data like permissions, computers and storage quota will still be stored in the PowerFolder Server database.

...

The connection can be configured using the web interface. Choose Preferences → Authentication  LDAP(warning)(warning) Please note that you need to be logged in with the admin account to change LDAP settings.

...

It is possible to setup a second and third unlimited directory server as authentication source for users. If a user is not found in the first directory, the server will try the second and third following LDAP sourcesources

Connecting to LDAP using SSL

To connect to a LDAP directory server which uses an SSL certificate to protect the connection, just replace ldap:// with ldaps:// when specifying the hostname of the LDAP server. If your LDAP server is using a different port for secure communication, simply append the port next to the hostname separated by colons.

(warning)(warning) Please note: If your LDAP directory server is using a self-signed certificate or certificate chain, which is not trusted by common public certificate authorities, you need to import the certificate into the Java KeyStore and restart PowerFolder Server before testing the connection.

...

The type of LDAP synchronization (0 = no accounts, 1 = only existing accounts, 2 = all accounts):

ldap.sync.type
ldap2.sync.type
ldap3.<index>.sync.type

The time interval for LDAP synchronization in hours:

ldap.sync.time
ldap2<index>.sync.time
ldap3.sync.time

Deprecated (Enabled means import of all accounts with a time interval of one hour):

ldap.sync.enabled
ldap2.sync.enabled
ldap3.sync.enabled

...

 

Configurable LDAP Alias dereferencing

...