User Administration - WAS to LDAP in RTC / RBF
Hello,
We have a RTC (4.0.3) and RBF (7.1.3.3) and the users are currently administered via WAS.
We would like to migrate from WAS user administration to LDAP.
If the user IDs are IDENTICAL to the user IDs in WAS, what steps are required to change the user administration from WAS to LDAP in RTC?
1. Enable LDAP authentication in WAS
2. Enable LDAP authentication in RTC / RBF
For RTC
a) Run
repotools-jts.sh -syncUsers repositoryURL=http:......
b)Licensing, Project permissions etc?? Other implications
For RBF
a) ?
5. Archive/Delete users in WAS
Thanks!
2 answers
Hi Angela,
In WAS, you just follow the normal steps to configure LDAP, regardless what global security setting has been set. Remember to designate an LDAP account as the WAS admin, otherwise you may be locked out of the WAS admin console.
The group membership of a user should be retrieved on-the-fly, so users should appear in the LDAP groups as long as the group mapping is done.
WAS should handle the authentication and group mapping only so licensing and other permissions should not be affected by the change.
Once you configure LDAP in WAS, I believe the federated user registry (file based) will be disabled automatically, so you don't need to do anything.
Not familiar with RBF though. Hopefully others will chime in on this one.
In WAS, you just follow the normal steps to configure LDAP, regardless what global security setting has been set. Remember to designate an LDAP account as the WAS admin, otherwise you may be locked out of the WAS admin console.
The group membership of a user should be retrieved on-the-fly, so users should appear in the LDAP groups as long as the group mapping is done.
WAS should handle the authentication and group mapping only so licensing and other permissions should not be affected by the change.
Once you configure LDAP in WAS, I believe the federated user registry (file based) will be disabled automatically, so you don't need to do anything.
Not familiar with RBF though. Hopefully others will chime in on this one.