Table of Contents |
---|
...
- Configure the Abiquo Properties as described below
- Check LDAP/AD users have all information to be passed to Abiquo as described below
- Log in to Abiquo as the admin user. Remember to set a secure password
- In Abiquo, create the following entities to match your LDAP/AD entities:
- Abiquo enterprises with the naming matching the value of the appropriate attribute from LDAP/AD. For details of how to create an enterprise, see Manage Enterprises
- Abiquo roles with the External roles attribute set to the LDAP/AD groups of the role, see Manage Roles
- To use external roles, enter the role name only, for example:
- External roles:
- my_ldap_role_01
- my_ldap_role_02
- External roles:
- To use external roles, enter the role name only, for example:
After you have completed the configuration, allow your users to log in using LDAP authentication
...
Property | Default Value | Explanation _____________________________________________ |
---|---|---|
abiquo.auth.module | abiquo | Whether Abiquo should authenticate only via database or it should also authenticate against LDAP/Active Directory. |
abiquo.ldap.authentication.server.url |
| URL of LDAP/Active Directory server |
abiquo.ldap.authentication.server.port | 389 | Port to connect to on LDAP/Active Directory server. |
abiquo.ldap.authentication.server.protocol | ldap | Protocol to be used when authenticating to LDAP/Active Directory. Values: ldap , ldaps |
abiquo.ldap.authentication.server.baseDN |
| Base Distinguished Name of the LDAP/Active Directory. |
abiquo.ldap.authentication.custom.userDnPattern | cn={0},CN=Users | Use this property to tell Abiquo to perform an additional custom query against the specified schema in the LDAP/Active Directory. |
abiquo.ldap.authentication.attribute.enterprise | organizationname | The attribute in LDAP/Active Directory to look up the Enterprise Name which must be an Enterprise in Abiquo.
|
abiquo.ldap.authentication.autoUserCreation | true | Whether Abiquo must create a user in Abiquo based on a successful login to LDAP |
Information that Abiquo retrieves to create users
...