Defining LDAP Domain Access for Business Directory
If the TDV sites that you want to expose within Business Directory have LDAP users defined, you must complete their configuration.
If you want to use LDAP domains with Business Directory, you should configure the ldap.properties file. You should also use the properties file to indicate whether you want permissions granted to nested groups.
The following instructions provide one method for completing the configuration using an ldap.properties file that is distributed with TDV.
To configure the necessary LDAP access for Business Directory
1. Locate your TDV LDAP properties file in the following directory:
<CIS_install_dir>/conf/server/ldap.properties
2. Copy the file to the following Business Directory location:
<bd_install_dir>\conf\server\ldap.properties
3. Edit the file as necessary. For details, see LDAP Domain Administration in the TDV Administration Guide topic.
5. Add TDV sites to Business Directory.
The following things happen:
— The LDAP connection information that the TDV site uses is imported into the Business Directory server. This includes everything except the LDAP password.
— The LDAP domain is imported into the Business Directory server using the same domain name as the one that is used in the TDV server.
— All LDAP-based users and groups registered with TDV are imported to the Business Directory server.
— By default all imported LDAP users (not groups) get the Access Directory right.
6. Open the Sites page and provide the LDAP password for any sites with the message:
The ldap password is missing. Please supply the password. [bd-200671]
7. Optionally, grant additional Business Directory access rights for the additional LDAP users.
LDAP users can now use their configured domain and username/password combinations to log into Business Directory.