1.1. LDAP server management
LDAP servers in the PlusWorkflow system can be used to authorize users in the system and to import users.
To add/edit/remove an LDAP server, go to Administration -> System configuration -> LDAP servers. After entering we will see the following view:
Figure 7.1.1 contains the management view of LDAP domain servers.
As you can see in Figure 7.1.1, the view shows a table with added domain servers. The PlusWorkflow system can have several LDAP servers.
The LDAP domain server has the following configuration:
- Domain name - the name of the domain we are adding, eg suncode
- Server address - server address (domain server IP address), eg 192.168.1.102
- Server port number - server port (we add to the server address, eg 192.168.1.102:333)
- User - user name by which the system can connect to the configured LDAP server (not to be confused with the system user)
- Password - the user's password by which the system can connect to the configured LDAP server (the password is encrypted after saving)
- Connection parameters - special parameters for communication with the LDAP server, eg OU = Users, DC = suncode, DC = sa
- User name template - a field specifying according to which template users are to be authorized in the LDAP server (eg: for the pattern "<domain>\\<user>" the user will be sent to the LDAP server in the form "domain_name\username".
- SPNEGO domain - the domain name as expected by the LDAP server (may be different on the system than on the LDAP side)
1.2. Adding an LDAP server
To add a domain to the PlusWorkflow system, click on the "New server" button (see Figure 7.1.1). After clicking, a window will appear with a form for adding a new LDAP domain:
Figure 7.1.2 shows the form for adding an LDAP domain to the PlusWorkflow system.
The form should be completed with all the data described in section 1.1 LDAP server management. At the bottom of the form is also the "Mapping LDAP attributes" form. It is filled with default data.
1.3. Editing an LDAP server
Figure 7.1.3 shows a window with the form of changing the LDAP domain data.
Any added domain server can be edited, and its parameters can be freely changed. To do this, press the "Edit" button in the table next to the appropriate server. After pressing the button, the editing form will appear. It is exactly the same as the server adding form. Its fields are already filled with current values. After making changes, press the "Change domain server" button. If you do not fill in the "Password" and "Confirm password" fields, the password will remain as it was before editing. To change the password, complete the above fields.
1.4. Deleting an LDAP server
An added LDAP domain server can be removed. To do this, click on the "Delete" button next to the selected domain. A window will appear confirming that the server has been deleted. To do this, confirm your intention to remove the domain by clicking "Ok".