Novell PLATESPIN ORCHESTRATE 2.0.2 - DEVELOPMENT CLIENT REFERENCE 08-28-2009 Reference page 66

as members of a group "xyz", or "XYZ", "xYz", etc. to authenticate as an administrator. To enforce
to case-sensitive matching, use
for Active Directory* servers.
Active Directory Service Settings
If you select Active Directory Service in the Server Type drop down list, the following settings are
available:
Directory Name: Enter the name of the Active Directory Service server.
Servers: This property is a list of strings containing
used.
Each entry can be of one of three forms:
<hostname>
<hostname>:<port>
<hostname>:<port>:<sslport>
In all cases,
however, the host name must exactly match the name on the ADS server SSL certificate.
You can modify this list by clicking the
box, where you can add, remove, or change the order of server names.
Advanced: The settings in this section are for more selective ADS authentication.
SSL: Selecting this option (assuming that the accompanying Start TLS check box is not also
selected and also assuming that the ADS server's SSL certificate has been installed on the
PlateSpin Orchestrate Server JVM) securely connects to the ADS server using SSL encryption.
The older style LDAP protocol (
Start TLS: Selecting this option immediately promotes the connection to SSL encryption by
bypassing the older style protocol in favor of the LDAPv3
the
nonSSL
on the JVM of the PlateSpin Orchestrate Server.
Query Account: Enter the account name that is to be used for querying group information on
authenticated users.
Query Password: Enter the clear text password used to authenticate the query account on the
LDAP server.
Generic Settings
When you select Generic LDAP Directory Service as the Server Type, the following additional
settings are displayed:
Base Domain Name: Specifies the Root DN of the LDAP server's directory tree. This must be
obtained by the administrator, and is usually in the form of:
User Attribute: Specifies the attribute on a user's entry that identifies his or her login account
name. For ADS servers, this attribute is
66 PlateSpin Orchestrate 2.0 Development Client Reference
LDAP:group:XyZ
is a resolvable DNS name or an IP address. If SSL or TLS are in use,
<hostname>
LDAP port. To use this option, the ADS server's SSL certificate must be installed
instead. Non-case-sensitive matching is needed
server:port
button to open an Attribute Element Values dialog
is used for the connection.
ldaps://)
dc=adsroot,dc=novell,dc=com
.
sAMAccountName
entries for a list of servers to be
extended operation on
Start TLS