Open topic with navigation

TIBCO BusinessEvents® Enterprise Edition 6.3.1

# LDAP Authentication Properties for the CDD File

These are the LDAP authentication properties used in the CDD file.

Property | Notes
--- | ---
`be.auth.ldap.type` | Use this property only if you want to use OpenLDAP for LDAP authentication. The property is not required for Oracle Directory Server or Windows Active Directory server. Set his property `openldap` to use the RMS server with OpenLDAP
`be.auth.ldap.port` | Specifies the port for LDAP authentication.
`be.auth.ldap.adminDN` | Specifies the base distinguished name (DN) for admin login. For example:
    cn=Directory Administrators, dc=na, dc=tibco, dc=com.
`be.auth.ldap.adminPassword` | Specifies the password for the LDAP administrator DN.
`be.auth.ldap.baseDN` | Specifies the base tree in LDAP under which users can be searched. For example, `dc=na, dc=tibco, dc=com`.
`be.auth.ldap.roleAttr` | Specifies the name of the attribute used by the LDAP server for role information of a user. Set the value to `member` for RMS server with OpenLDAP The default value is `nsroledn` (for Oracle Directory Server).
`be.auth.ldap.uidattr` | Specifies the name of the attribute used by the LDAP server for username information. Allowable values are as follows: `uid` for Oracle Directory Server `cn` for ActiveDirectory. The default value is `uid`.
`be.auth.ldap.useRoleDN` | Set this property to true to use the fully qualified name of the attribute used by the LDAP server for role information of a user. Set this property to false to use only the name of the attribute, which is shown in the notes for the `be.auth.ldap.uidAttr` property. The default value is `true`.
`be.auth.ldap.objectClass` | Specifies the `ObjectClass` attribute value for DS. Many object classes can exist, for example, `inetOrgPerson` on Oracle Directory Server, and `user` on Active Directory. If the search should span all object classes, keep this value empty or specify an asterisk ("*").
`be.mm.user.role` | Optional. Specify the value of the property to the LDAP `group_name` which have user rights in BusinessEvents.
`be.mm.admin.role` | Optional. Specify the value of the property to the LDAP `group_name` which have admin rights in BusinessEvents.
`be.auth.ldap.dnAttr` | Specifies the name of the attribute that contains the fully qualified name. The default value is `distinguishedName`.
`be.auth.ldap.ssl` | Specifies a secure connection to the LDAP host is to be established. The default value is `false`. Set the property to `true` to enable a secure connection.
`be.auth.ldap.filter.<attributeName>` | While using LDAP for authentication, you can filter users who get access to TIBCO BusinessEvents WebStudio based on their attributes on the LDAP server. The `<attribute>` in the property is the name of the attribute. Set the value of the property to the value of the attribute that a user should have to get access to TIBCO BusinessEvents WebStudio. For example, if you have a large number of LDAP users and they need to be authenticated based on the attribute of their roles, TIBCO BusinessEvents can filter them based on their roles.

Did you find this helpful?

YesNo
Great!
Thanks for taking the time to give us some feedback.
Sorry about that

Why wasn't this helpful? (check all that apply)

Could not find what I was looking for
Instructions confusing or unclear
Instructions did not work

Want to tell us more?

Please select at least one option or provide details about the issue!!

Error occurred while submitting feedback.

Error2 occurred while submitting feedback.

TIBCO BusinessEvents® Enterprise Edition

Copyright © 2004-2024. Cloud Software Group, Inc. All Rights Reserved.