Configure Java External Authentication Plug-ins Using GUI For OID

Configuring Java-based External Authentication Plug-ins with ODSM

Step 1) Open ODSM console :
http://<OIDHost>:<OIDPort>/odsm
login as cn=orcladmin user
- Click Advanced

Setting for oidexplg_bind_ad:

 

- In Plug-in list click oidexplg_bind_ad for configuring java-based bind external authentication plug-in for AD
-Click "Optional Properties" tab
-In "Flex Fields" define
host = AdHostName(server where AD is installed)
port = Port No of AD
No other parameters apart from those are necessary in "Flex Fields" 

 


- For "Plug-in Subscriber DN List"
set container dn where AD synchronized users are stored. In our example
cn=users,dc=XXXX,dc=XXX,dc=XX

-Keep "Plug-in Request Group " as empty

-Make sure  "Plug-in Entry Properties" is (!(&(objectclass=orcladobject)(objectclass=orcluserv2)))
Note : keeping this value,  means that plugin will NOT be invoked for users that are NOT synchronized from AD

-Click "Mandatory Properties"
- Keep parameters from "Mandatory Properties" as below (those are default values usual)
But make sure that "Plug-in Enable" check box is checked.




Click Apply button on the upper, right side.

Setting for oidexplg_compare_ad:

- In Plug-in list click oidexplg_compare_ad for configuring java-based "compare" external authentication plug-in for AD

-Click "Optional Properties" tab
-In "Flex Fields" define
host = AdHostName(server where AD is installed)
port = Port No of AD
No other parameters apart from those are necessary in "Flex Fields"


 


- For "Plug-in Subscriber DN List"
set container dn where AD synchronized users are stored. In our  example
cn=users,dc=XXXX,dc=XXX,dc=XX

-Keep "Plug-in Request Group " as empty.

-Make sure  "Plug-in Entry Properties" is (!(&(objectclass=orcladobject)(objectclass=orcluserv2)))
Note: keeping this value, means that plugin will NOT be invoked for users that are NOT synchronized from AD.


  

 -Click "Mandatory Properties"
- Keep parameters from "Mandatory Properties" as below (those are default values usual)
But make sure that "Plug-in Enable" checkbox is checked.


 

 Click Apply button on the upper, right side.