CaliberRM / LDAP Integration CaliberRM
Borland Software Corporation 100 Enterprise Way Scotts Valley, California 95066-3249 www.borland.com Made in Borland Copyright 2004 Borland Software Corporation. All rights reserved. All Borland brand and product names are trademarks or registered trademarks of Borland Software Corporation in the United States and other countries. Microsoft, Windows, and other Microsoft product names are trademarks or registered trademarks of Microsoft Corporation in the U.S. and other countries. Linux is a registered trademark of Linus Torvalds. All other marks are the property of their respective owners. Corporate Headquarters: 100 Enterprise Way, Scotts Valley, CA 95066-3249 o 831-431- 1000 o www.borland.com o Offices in: Australia, Brazil, Canada, China, Czech Republic, France, Germany, Hong Kong, Hungary, India, Ireland, Italy, Japan, Korea, the Netherlands, New Zealand, Russia, Singapore, Spain, Sweden, Taiwan, the United Kingdom, and the United States.
Table of Contents CaliberRM / LDAP Integration 1 Introduction...................... 1 Default Key Values.................. 1 Configuring and Enabling CaliberRM / LDAP.... 2 CaliberRM Client and Server Connectivity Options. 3 1
2
0CaliberRM / LDAP Integration Chapter Introduction People and businesses are increasingly relying on networked computer systems to support distributed applications. To improve functionality, ease of use and to enable cost-effective administration of distributed applications, information about users needs to be organized in a clear and consistent manner. Much of this information can be shared among many applications, but it must also be protected to prevent unauthorized modification or the disclosure of private information. Information describing the various users is often collected into a special database, sometimes called a directory. As the number of different networks and applications grows, the number of specialized directories of information also grows. When all of this information can be maintained and accessed in a consistent and controlled manner, it provides a focal point for integrating a distributed environment into a consistent and seamless system. The Lightweight Directory Access Protocol (LDAP) is an open industry standard that has evolved to meet these needs. LDAP defines a standard method for accessing and updating information in a directory. LDAP is gaining wide acceptance as the directory access method of the Internet and is therefore also becoming strategic within corporate intranets. A growing number of software vendors support LDAP, and it are incorporating it into a growing number of applications. Default Key Values These default key values are required when configuring and enabling the CaliberRM / LDAP Integration. Note: See Configuring and Enabling CaliberRM / LDAP Integration. Default key values are: "host"="must_edit_this_field" "port"=dword:0000027c "secure"=dword:00000001(if secure is set to 0, then port is set to 389-decimal) "windows"=dword:00000001 "enable"=dword:00000000 "basedn"="must_edit_this_field" "basepw"="" (The basepw can be blank) "filter"="(&(objectcategory=person)(objectclass=user)(samaccountname=%s))" ( filter may need to be modified, check with your LDAP Administrator) Note: REG_DWORD values are in hexadecimal. Introduction 1
Configuring and Enabling CaliberRM / LDAP Note: Borland Customer Support is not prepared to provide assistance with your LDAP or Active Directory settings, please contact your LDAP administrator. To configure and enable LDAP: 1 On the machine where the CaliberRM server is installed, select Start > Settings > Control Panel. 2 Click on the CaliberRM Server icon. The CaliberRM Server Settings are displayed. 3 Click on the Directory Services tab. The LDAP Configuration screen is displayed. The following LDAP settings are configured on the LDAP Configuration screen: (Enabled, basedn, Host, Filter, SSL, Port) Note: See Default Key Values when configuring LDAP settings. 4 Select the Enabled (Box). The Enabled (Box) enables or disables CaliberRM LDAP use. If the Enabled (Box) is empty, CaliberRM LDAP is disabled. If the Enabled (Box) is checked, CaliberRM LDAP is enabled. 5 Select the basedn field. Enter the basedn data. The basedn data represents the disquinguished name of the entry at which to start the search. For example, the basedn for all Atlanta users in the directory for Company A would be: (OU=Users,OU=Atlanta,DC=domain,DC=comp,DC=net) 6 Select the Host field. Enter the Host data. The Host data represents the domain name, or a space-separated list of host names or dotted strings representing the IP address of hosts running an LDAP server to which to connect. Each host name in the list can include an optional port number which is separated from the host itself with a colon (:) character. 7 Select the Filter field. ( filter may need to be modified, check with your LDAP Administrator). 8 Select the SSL (Box). The SSL (Box) enables or disables encryption for LDAP communications to CaliberRM. If the SSL (Box) is empty, encryption is disabled for LDAP communications to CaliberRM. If the SSL (Box) is checked, encryption is enabled for LDAP communications to CaliberRM. Note: CaliberRM 2005 Server will allow logins with non-encrypted passwords even if LDAP is enabled. 9 Select the Port field. Enter the Port data. Normally, if you turn on SSL, you need to change the port number as well. By default the ldap_port is 389, but the ldap_ssl_port by default is 636. Borland anticipates most users will enable SSL, so our default port value is 636 (decimal). 10 Select Apply to save the settings. 11 Select OK to close the CaliberRM Server Settings display. 12 LDAP is now configured and enabled. Note: The admin user is the only user who can log in using CaliberRM credentials when LDAP is enabled. All other users must now log in using their LDAP credentials. 2 CaliberRM/LDAP Integration
CaliberRM Client and Server Connectivity Options With CaliberRM 2005 and 6.51 SP1 servers can have connectivity from the following CaliberRM clients: CaliberRM 2005 clients CaliberRM 6.51 SP1 clients CaliberRM 6.0 clients CaliberRM 6.5 clients Note: 6.x clients will not support all of the features available in CaliberRM 2005. CaliberRM Client and Server Connectivity Options 3
4 CaliberRM/LDAP Integration