How to import LDAP Groups, but not Users, to Liferay
DZone's Guide to
How to import LDAP Groups, but not Users, to Liferay
Join the DZone community and get the full member experience.
Join For FreeWSO2 is the only open source vendor to be named a leader in The Forrester Wave™: API Management Solutions, Q4 2018 Report. Download the report now or try out our product for free.
When you configure Lifeary to talk to an LDAP - it imports users and groups in two different ways.
1. Import users and while importing users look at the "Group" attribute of the user and import groups.
2. Import groups and while importing groups look at the "User" attribute of the group and import all the users of that group.
By default Liferay uses the first approach.
If we want to import Groups only - not the users from the LDAP - then we need to have the 2nd approach.
To enable the second approach, you need to add the following to the liferay_home/tomcat/webapps/ROOT/WEB-INF/classes/portal-ext.properties file.
ldap.import.method=group
Then you need to keep the "User" attribute of the group configuration blank.
1. Import users and while importing users look at the "Group" attribute of the user and import groups.
2. Import groups and while importing groups look at the "User" attribute of the group and import all the users of that group.
By default Liferay uses the first approach.
If we want to import Groups only - not the users from the LDAP - then we need to have the 2nd approach.
To enable the second approach, you need to add the following to the liferay_home/tomcat/webapps/ROOT/WEB-INF/classes/portal-ext.properties file.
ldap.import.method=group
Then you need to keep the "User" attribute of the group configuration blank.
IAM is now more than a security project. It’s an enabler for an integration agile enterprise. If you’re currently evaluating an identity solution or exploring IAM, join this webinar.
Like This Article? Read More From DZone
Topics:
Published at DZone with permission of Prabath Siriwardena , DZone MVB. See the original article here.
Opinions expressed by DZone contributors are their own.
{{ parent.title || parent.header.title}}
{{ parent.tldr }}
{{ parent.linkDescription }}
{{ parent.urlSource.name }}