Configuring iHub security : Understanding LDAP configuration
 
Understanding LDAP configuration
When iHub uses the RSSE application, Encyclopedia volume users that are defined in the LDAP server must have a password. The user information must use:
*A single LDAP organization
*The appropriate LDAP object classes
The ldapconfig_<volume>.xml file defines the mapping between Encyclopedia volume user information and LDAP information. Encyclopedia volume user management information typically maps to LDAP information in the following way:
*The Encyclopedia volume users, groups, and roles map to LDAP object classes. For example, you can specify that Actuate users map to the LDAP inetorgperson object class and that roles and groups map to the LDAP groupofuniquenames object class.
*Individual users, roles, and groups are LDAP objects. For example, after specifying how Actuate users map to the LDAP inetorgperson object class of an organizational unit, you create LDAP users based on the inetorgperson object class. In LDAP, you can create users named MBarajas and JThompson based on the inetorgperson object class. MBarajas and JThompson are Encyclopedia volume users.
*Actuate user properties, such as e‑mail address and home folder, are specified in LDAP attribute-value pairs of the LDAP object class. For example, after specifying that the Actuate users are based on the inetorgperson object class, you specify that Actuate e‑mail maps to the mail attribute of the LDAP inetorgperson object class. You create object class attributes to store Actuate user properties.
In LDAP, you can also create a set of Encyclopedia volume users, notification groups, and roles by creating the LDAP objects within different LDAP organizational units and specifying LDAP distinguished names to point to the different LDAP organizational units.