Setting up the Connection

To set up the connection to the LDAP server:

1. Select the following option from the LDAPCONF menu:

[1] Set Connection Information

The following prompt is displayed:

Enter name of host on which the LDAP server resides (localhost):

2. Enter the name of the machine where the LDAP server is running, either as a host name specified in your local machine’s hosts file, or as an IP address. The LDAP server supports Internet Protocol version 6 (IPv6), you can input an IPv6 host name or an IPv6 address under the prompt.

Note 

The network and machines that host LDAP servers must support IPv6.

The following prompt is displayed:

Enter port number on host to connect to (389):

3. Enter the TCP port number (a valid numeric value greater than 1) to connect to on the specified host. The default value for LDAP servers is 389.

The following prompt is displayed:

Enter the distinguished name of the entry to bind as (NULL):

4. Enter the distinguished name (DN) of the entry which will be used to authenticate this connection to the LDAP server. (If you accept the default option LDAPCONF will connect as a default LDAP user.)

The following prompt is displayed:

Do you wish to change the password (Y/N):

5. Enter:
Y, if you want to change the password associated with this entry. You will then be prompted to enter and confirm the new password.
N, if you want to use the existing password.

If you are using UNIX, the following prompt is displayed:

 

SSL is enabled, do you wish to disable it (Y/N): 

or

SSL is disabled, do you wish to enable it (Y/N): 

6. Enter:
Y, if you want to change the status of SSL.
N, if you want to keep the current status of SSL.

If you enable SSL, the following prompt is displayed:

PATH to the Certificate Database for SSL(/home/certs/): 

Enter the path to the SSL Certificate Database.

7. If you are using UNIX and have enabled SSL, or if you are using Windows, the following prompt is displayed:

Is the target LDAP provider Microsoft Active Directory [No] (Y/N): 

This is necessary because Microsoft Active Directory handles password changes differently from other LDAP providers.

Enter:

Y, if the LDAP server to which you are connecting uses Microsoft Active Directory.
N, if the LDAP server does not use Microsoft Active Directory. This is the default value.

The LDAPCONF menu is re-displayed.

8. If the LDAP server you are connecting to stores directory information internally in UTF-8 format, select the following option from the LDAPCONF menu:

[10] Enable Attribute Value Translation from UTF-8

This ensures that any attribute information that uses characters from multi-byte character sets (such as Chinese, Japanese and Korean) is downloaded correctly to the iProcess Engine.

If you subsequently need to reconfigure the iProcess Engine not to translate downloaded attribute values from UTF-8, you can do so by selecting the same option from the LDAPCONF menu:

[10] Disable Attribute Value Translation

The LDAPCONF menu is re-displayed.

Note 

Remember to Save these settings if you want to use them in a future LDAPCONF session.