LDAP Authentication to Novell eDirectory

Anthony_Hall

We have a customer using Novell eDirectory for user management. They have several Windows domains, but general users don't have accounts on them - only on eDirectory. We are running LES 9.7.1 on Windows 2003 Server with IIS 6, and Directory Services 3.0.0. The objective is a single sign on.I have set up LDAP Read Only synchronisation to eDirectory and successfully synchronised in accounts. I have configured LDAP authentication in Livelink, basically using the same settings as I used for synchronisation. I have tried various directory security options in IIS on the server, but I am always prompted with what looks like a Windows AD type login prompt. Is there some extra add on to IIS needed to make it talk to LDAP? This article http://www.novell.com/coolsolutions/tip/5980.html seems to imply that there is. At the moment, IIS is just out of the box, nothing added. What is an official or supported (by Open Text) method of doing this?

Matt Eidson

Message from Matthew Eidson via eLinkAnthony, Out of the box IIS will not do LDAP authentication and will require some sort of add-on like an ISAPI filter mechanism to authenticate to an LDAP such as eDirectory. I'm not sure of any off the top of my head but I believe there are several free ones and others that have a small cost but come with support. Another option would be use Apache Tomcat with the livelink servlet. Tomcat can do LDAP authentication natively via JNDI. I hope this helps. ____________________________________________Matt EidsonAppTier, LLCMobile: 213.280.2870Toll Free: 888.901.7774 x4003Email: matt@apptier.com ____________________________________________________________________________From: eLink Discussion: Livelink Directory Services Discussion [mailto:directoryservices@elinkkc.opentext.com]Sent: Wed 1/14/2009 10:29 PMTo: eLink RecipientSubject: LDAP Authentication to Novell eDirectoryLDAP Authentication to Novell eDirectory Posted by anthony.hall@fastman.net.au (Hall, Anthony) on 2009/01/15 01:28 We have a customer using Novell eDirectory for user management. They have several Windows domains, but general users don't have accounts on them - only on eDirectory. We are running LES 9.7.1 on Windows 2003 Server with IIS 6, and Directory Services 3.0.0. The objective is a single sign on.I have set up LDAP Read Only synchronisation to eDirectory and successfully synchronised in accounts. I have configured LDAP authentication in Livelink, basically using the same settings as I used for synchronisation. I have tried various directory security options in IIS on the server, but I am always prompted with what looks like a Windows AD type login prompt. Is there some extra add on to IIS needed to make it talk to LDAP? This article http://www.novell.com/coolsolutions/tip/5980.html seems to imply that there is. At the moment, IIS is just out of the box, nothing added. What is an official or supported (by Open Text) method of doing this? ________________________________[To reply to this thread, use your normal E-mail reply function.] Discussion: Livelink Directory Services Discussion Livelink Server: knowledge-wlweb01 To Unsubscribe from this Discussion, send an e-mail to unsubscribe.directoryservices@elinkkc.opentext.com .