Open Ldap Integration and Configuration with Lifray 6.2.LDAP (Lightweight Directory Access Protocol) is a software protocol for enabling anyone to locate organizations, individuals, and other resources such as files and devices in a network, whether on the public Internet or on a corporate intranet

1. LIFERAY:
OPENLDAP INTEGRATION
& CONFIGURATION
- Vinaykumar Hebballi

2. Topics to cover
 Understanding LDAP & Servers.
 Information Structure.
 Protocol overview.
 Installing OpenLdap.
 LDAP Server Configuration.
 Integration with Liferay.
 Activate LDAP
Liferay:LDAP Integration & Configuration12/26/16 2

3. Understanding LDAP
 Lightweight Directory Access Protocol (LDAP).
 open network protocol standard designed to provide access to
distributed directories.
 using TCP/IP protocols.
 The phrase “write once read many times“ describes the best
use of LDAP.
 standard and allowing directories to be managed.
Liferay:LDAP Integration & Configuration12/26/16 3

4. LDAP Servers
 389 Directory Server (formerly Fedora/Red Hat Directory Server)
 Active Directory from Microsoft
 Apache Directory Server
 Apple Open Directory
 FreeIPA
 IBM Tivoli Directory Server
 Mandriva Directory Server
 Novell eDirectory
 OpenDJ - A fork of the OpenDS project
 OpenDS
 OpenLDAP
 Optimal IdM
 Oracle Internet Directory
 Radiant Logic VDS
 Sun Java System Directory Server
Liferay:LDAP Integration & Configuration12/26/16 4

5. Information Structure
 Presents information in the form of a hierarchical tree
structure called a DIT (Directory Information Tree).
Liferay:LDAP Integration & Configuration12/26/16 5

6. Information Structure.
 Each information, called Entry (or even DSE, Directory
Service Entry).
 Each entry in the LDAP directory relates to an abstract or real
object (for example a person, a piece of hardware, parameters,
etc.).
 Each entry is made up of a collection of key/value pairs called
attributes.
Liferay:LDAP Integration & Configuration12/26/16 6

7. Information Structure.
 Types of attributes :
 Normal attributes: these are the usual attributes (cn, name,o, ...) distinguishing the
object.
 Operational attributes: these are the attributes which only the server can access in
order to manipulate the directory data (modification dates, etc,).
 Every entry in the directory has a distinguished name (DN).
 DN is made up of attribute=value pairs, separated by commas,
for example:
 dn:o=hp,ou=people,uid=hi5@gmail.com
Liferay:LDAP Integration & Configuration12/26/16 7

8. Protocol Overview
 Client starts an LDAP session by connecting to an LDAP
server.
 The default TCP port is 389.
 Bind to the server (think of this as authentication).
 client then sends an operation request to the server.
 the server sends responses in return.
Liferay:LDAP Integration & Configuration12/26/16 8

9. Integration of Open LDAP & Liferay
 Software Requirement:
 OpenLDAP (Windows edition)
 LDAP Browsers(Jxplorer)
 Installing openLDAP:
1. Choose your host as “localhost” or an “IP address”
2. Choose the port and SSL-port as you may want to use or can let it by default to 389 and 636
respectively.
3. Select a database for directory you want to use: BDB or LDAP (we have used BDB i.e
berkely’s DB)
4. NEXT -> choose a password for your root directory, by default it would be “secret”.
5. NEXT-> install-> Finish.
Liferay:LDAP Integration & Configuration12/26/16 9

10. LDAP Server Configuration
 Open File -> Connect.
 Fill the required details Like Host, Port, BaseDN, Level, Password and
Template -> ok.
 Tree structure is created in Jxplorer -> right click on that and click new.
 Select parent DN and fill RDN as cn=*.
 Select class and click -> Ok.
 Finally provide the following necessary values like sn , givenName ,
initials , mail , title and password and click submit.
12/26/16 Liferay:LDAP Integration & Configuration 10

11. Integration with Liferay
 Go to the Control Panel in Liferay.
 Control Panel ---> Portal Settings---> AuthenticaionLDAP
 Click on the Add from LDAP Servers Give name and Select
open ldap.
 For the Connection fill :
 Base Provider URL
 Base DN
 Principal
 Credentials
 Click Test Connection.
12/26/16 Liferay:LDAP Integration & Configuration 11

12. Continue
 For users Fill :
 Authentication Search Filter.
 Import Search Filter.
 User mapping details like screen name, email etc.
 Click Test LDAP User.
 To export the details fill:
 Users DN
 User Default Object Classes
 Groups DN
 Group Default Object Classes
12/26/16 Liferay:LDAP Integration & Configuration 12

13. Using Portal-ext.properties
 passwords.encryption.algorithm=NONE
 ldap.auth.password.encryption.algorithm=NONE # ldap
 ldap.base.provider.url=ldap://localhost:389
 ldap.base.dn=dc=example,dc=com
 ldap.security.principal:cn=root,dc=example,dc=com
 ldap.security.credentials=secret ldap.auth.enabled=true
 ldap.auth.required=true
12/26/16 Liferay:LDAP Integration & Configuration 13

14. Activate LDAP
 Go to LDAP option in liferay.
 Check the Enabled and required option.
 Check the import enabled.
 Check the export enabled.
 Use LDAP Password Policy
 Login with LDAP users to log in liferay.
12/26/16 Liferay:LDAP Integration & Configuration 14

15. Thank you