Hi, teamates

Anyone already has enabling, configuring...LDAP for IBM ACE onpremise?

At the moment, the security and the different roles are set in the node. conf.yaml with local password, however, I would like to change the way in which the user logs in to WebUI or Toolkit with Domain User.

the above based on recommendations of IBM,

I need help for the next one parameters.

#ldapUrl: ldap[s]://server[:port]/baseDN[?[uid_attr][?[base|sub]]] # ldap authentication url

Thanks

Greetings/Saludos

------------------------------
Luis Axel Reyes Espinoza
------------------------------

Hi Luis

I have indeed. My configuration is like this

caPath: 'C:\path\to\my\caPath' 

ldapUrl: 'ldaps://ldap.my.network.com:636/DC=my,DC=network,DC=com?userPrincipalName'
  ldapBindDn: ldap::ldap.my.network.com
  ldapBindPassword: ldap::ldap.my.network.com
  #  Authorization
  authorizationEnabled: true   
  authorizationMode: 'ldap'     
  ldapAuthorizeUrl: 'ldaps://ldap.my.netwerk.com:636/DC=my,DC=network,DC=com?userPrincipalName?sub?(member={{dn}})'  
  ldapCheckServerIdentity : true 

In order to determine where your users are located in the ldap three and what parameter matches the username you enter, I use NetTools

After that you have to do proper role mapping as well with the full group name.