February 18, 2014

Configuration of LDAP in OBIEE 11.1.1.7.13

The below are the steps involved in configuration of Novell LDAP server.


Login in to the weblogic console with the weblogic credentials.


After login go to the Security Realms>>myrealm>>Providers


Click on New and Type the name of the LDAP server. It can be any name and select the type of authenticator.


You can see the newly created LDAP server in the Providers list.


Click on the Novell LDAP server and change the control flag to Sufficient. And repeat the same step to the Default Authenticator.


Click on Novell LDAP and select provider specific tab. Fill the details provided by your LDAP server administrator.

Field
Value
Host
Port
389
Principal
Credential & Confirm Credential
Enter the password for the Administrator user in Active Directory.
SSLEnabled
No
User Base DN
All Users Filter
(&(uid=*)(objectClass=user))
User From Name Filter
User Search Scope
subtree
User Name Attribute
uid
User Object Class
User
Use Retrieved User Name as Principal
No
Group Base DN
o=honeywell
All Groups Filter
(&(cn=*)(objectClass=*))
Group From Name Filter
(&(cn=%g)(objectClass=*))
Group Search Scope
subtree
Group Membership Searching
unlimited
Max Group Membership Search Level
0
Ignore Duplicate Membership
No
Static Group Name Attribute
cn
Static Group Object Class
group
Static Member DN Attribute
member
Static Group DNs from Member DN Filter
(&(member=%M)(objectclass=group))
Dynamic Group Name Attribute
Leave blank
Dynamic Group Object Class
Leave blank
Dynamic Member URL Attribute
Leave blank
User Dynamic Group DN Attribute
Leave blank
Connection Pool Size
6
Connect Timeout
0
Connection Retry Limit
1
Parallel Connect Delay
0
Results Time Limit
0
Keep Alive Enabled
No
Follow Referrals
Yes
Bind Anonymously On Referrals
No
Propagate Cause For Login Exception
No
Cache Enabled
yes
Cache Size
32
Cache TTL
60
GUID Attribute
guid

After filling the details click on save.

Now reorder the Providers such that the Novell LDAP should be on top.



Restart all the OPMN, Managed Server, Node Manager and Weblogic services. After successful restart check the users and groups tab in console, whether the users from LDAP has been displayed or not.

If Yes. Proceed to the below steps
Go to Security Realm>>myrelam>>roles and policies


Click on the view role conditions of the  Admin role


Select User from the drop down list and select Next.


Type the LDAP admin user name, click add and finish. This to be specific to your LDAP server. This completes the configuration in weblogic.

Now login to the Enterprise Manager. Go to the security provider configuration by the right click on the bifoundation_domain.

Click on configure.


Add the parameter Virtualize and the value is true. It should look like the below screenshot.



Restart all the weblogic, Managed server, nodemanager and OPMN. Try login now with the LDAP users in Analytics.














1.   


No comments:

Post a Comment