Connecting to an Active Directory in CostOS
...
Setting | Description | ||
|---|---|---|---|
Active | Active/Deactivated interval Synchronization | ||
Hostname | The host name of your directory server. Examples:
| ||
| Port | The port on which your directory server is listening. Examples:
| ||
| Bind Dn | The distinguished name of the user that the application will use when connecting to the directory server. Examples:
|
Connecting via SSL
In many cases the Active Directory uses a Self-Signed Certificate, or a Signed Certificate that is Signed by a non-trusted Root Certificate. When the CostOS Server tries to connect using the SSL port it will fail, since it does not trust the connection.
To bypass this problem we can import the Certificate of the Active Directory directly to the keystore used by the CostOS Server.
Exporting the Certificate from the Active Directory
Run the following on the server hosting the Active Directory
- Go to Run and type the mmc.exe command.
- Go to File and choose the Add/Remove Snap-in option.
- In Add or Remove Snap-ins, select the Certificates snap-in, and click on Add.
- In the Certificates snap-in dialog box, choose the Computer account option and click on Next.
- In the Select Computer dialog box, choose the Local Computer option and click on Finish.
- Expand the Certificates option and look for the CA Certificate to be exported. This certificate is normally located under Personal > Certificates.
- Double-click on the CA certificate to be exported.
- In the Certificate dialog box, choose the Details tab and then choose Copy to File.
- The Certificate Export Wizard appears. Choose Next. Note that there is no need to export the private key.
- On the Export File Format page, select the Base-64 encoded binary X.509(.CER) option.
- Choose Next.
- In the File to Export box, choose the path and name for the certificate, and choose Next.
- Choose Finish. The .cer file will be created in the location specified in the previous step.
- Finally, a dialog box will appear to inform the user that the export was successful. Choose OK to finish
Importing the Certificate to CostOS Server
On the following commands
- %COSTOS% is the installation folder of Costos Server
- %JAVA_HOME% is the %COSTOS%\jdk\ folder or %COSTOS%\jre\ depending on the version
- %ALIAS% is an alias that you can choose of your own
- %CERT_FILE% is the full path to the certificate you have extracted from the first part
Run the following on the server hosting the Costos Server
"%JAVA_HOME%\bin\keytool" -import -alias %ALIAS% -keystore "%JAVA_HOME%\jre\lib\security\cacerts" -file %CERT_FILE%If the above command asks you for a password the default is 'changeit' without the quotes
...
| Password | The password of the user specified above. |
| Base DN | The root distinguished name (DN) to use when running queries against the directory server. Examples:
|
| User Object Filter (optional) | The filter to use when searching user objects. Example:
|
| Synchronisation Interval | Synchronization is the process by which the application updates its internal store of user data to agree with the data on the directory server. The application will send a request to your directory server every x minutes, where 'x' is the number specified here. The default value is10 minutes. |
| SSL | Check this if the connection to the directory server is an SSL (Secure Sockets Layer) connection. Note that you will need to configure an SSL certificate in order to use this setting. Rad More |
Synchronize Application Groups from active directory
Application could obtain groups from Active Directory. The user should be member of the following groups where mapped with specific application roles.
| Ad Role Name | Application Role |
|---|---|
| CESAdmin | Administrator |
| CESProjectReader | Open/Edit Projects |
| CESProjectWriter | Create Projects |
| CESDatabaseUser | User |
| CESParamItemWriter | Create/Edit Assemblies |
| CESAssemblyWriter | Create/Edit Resources |
| CESFunctionWriter | Create/Edit Functions |
| CESColumnFieldWriter | Field/Formula Customization |
| CESLocationFactorWriter | Location Factor Customization |
| CESOnlineDBUser | Online Database User |
| CESUserAdmin | Create/Edit Users |
| CESEPS | Create/Edit EPS |
| CESCosmoPublisher | COS.MO Publisher |
| CESGlobalPRJVariabledWriter | Create/Edit Global Project Variables Template |
| CESMasterLayoutWriter | Create/Edit Layouts (Master Database) |
| CESMediaLibraryWriter | Open/Edit Media Library (Master Database) |
| CESCostTeam1 | CostOS Team 1 |
| CESCostTeam2 | CostOS Team 2 |
| CESCostTeam3 | CostOS Team 3 |
| CESCostTeam4 | CostOS Team 4 |
| CESCostTeam5 | CostOS Team 5 |
| CESCostTeam6 | CostOS Team 6 |
| CESCostTeam7 | CostOS Team 7 |
| CESCostTeam8 | CostOS Team 8 |
| CESCostTeam9 | CostOS Team 9 |
| CESCostTeam10 | CostOS Team 10 |
Related articles
| Content by Label | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| Page properties | |||
|---|---|---|---|
| |||
|