Configure LDAP with MDM Application

[selva raj]

Greetings,

We have installed MDM 9.1.0 and by default login as admin/admin credentials. We have LDAP server now and we would like to integrate Active Directory credentials as loggig to MDM application. I have refered tibco documentation and followed the link

https://docs.tibco.com/pub/mdm/9.0.0/doc/html/GUID-EBDF6481-452F-47EC-A1... but not helpful.

Kindly suggest how to configure LDAP server with MDM application.

 

Thanks

Selva

[Narasimha Murty Vuta]

Hi Selva,

 

Below are details to Login with a LDAP user in MDM. Here are some steps in ApacheDS:

 

1. Create a user:test3 in ApacheDS.

 

2. Copy rolemap.prop to $MQ_COMMON_DIR/<enterprisename>/maps directory. rolemap.prop file specifies the mapping of an external role to one TIBCO MDM role. For example: In MDM, there is an external role:WRITEUSRGUI, in rolemap.prop, you can add: Doe = WRITEUSRGUI

 

3. In ConfigValues.xml: <ConfValue description="Specify the identity of the principal for binding to LDAP Directory. It is a fully qualified Distinguished Name. See java.naming.security.principal. Optional, but must be configured if binding is required." isHidden="true" isHotDeployable="true" name="LDAP Security Principal" propname="com.tibco.cim.ldap.sec.principal" sinceVersion="8.2" visibility="All">                 <ConfString default="cn=Directory Manager" value="uid=admin,ou=system"/> </ConfValue> <ConfValue description="Full Distinguished Name of a node under an LDAP directory where users are located. User search happens in this directory." isHidden="true" isHotDeployable="false" name="LDAP Search Base DN" propname="com.tibco.cim.ldap.searchAnchor" sinceVersion="8.2" visibility="All">                 <ConfString default="ou=People,dc=apac,dc=tibco,dc=com" value="ou=users,ou=system"/> </ConfValue> <ConfValue description="Attribute name in search results which contains roles/groups assigned to the user." isHidden="true" isHotDeployable="true" name="Role Attribute" propname="authentication.ldap.role" sinceVersion="8.2" visibility="Advanced">                         <ConfString default="GROUP" value="SN"/> </ConfValue>

 

 

 

4. Restart appserver and login with LDAP user: test3, this will create a user account in MDM

 

 

 

Thanks,

 

Narasimha

[Narasimha Murty Vuta]

Hi Selva,

Below are details to Login with a LDAP user in MDM. Here are some steps in ApacheDS:

1. Create a user:test3 in ApacheDS.

2. Copy rolemap.prop to $MQ_COMMON_DIR//maps directory. rolemap.prop file specifies the mapping of an external role to one TIBCO MDM role. For example: In MDM, there is an external role:WRITEUSRGUI, in rolemap.prop, you can add: Doe = WRITEUSRGUI

3. In ConfigValues.xml:

 

4. Restart appserver and login with LDAP user: test3, this will create a user account in MDM

 

Thanks,

Narasimha