LDAP Security Realm-->LDAP Server

LDAP Security Realm-->LDAP Server

Tasks Related Topics Attributes

Overview

Use this page to configure the LDAP directory server to enable communication between the LDAP directory server and WebLogic Server.
To use the LDAP security realm, you need to use Compatibility security. The use of the LDAP security realm is deprecated in this release of WebLogic Server.

Tasks

Configuring an LDAP V1 Security Realm
Enabled Communucation between the LDAP Server and WebLogic Server
Specifying How Users Are Located in the LDAP V1 Security Realm
Specifying How Groups Are Located in the LDAP V1 Security Realm
Adding a Note to the LDAP V1 Security Realm
Configuring the Caching Realm

Related Topics

Introduction to WebLogic Security
Managing WebLogic Security
Securing WebLogic Resources
Programmimg WebLogic Security
Developing Security Providers for WebLogic Server
Securing a Production Environment
The Security topics in the WebLogic Server 8.1 Upgrade Guide
Security FAQ
The Security page in the WebLogic Server documentation

Attributes

Attribute Label

Description

Value Constraints
LDAPURL The location of the LDAP server. Change the URL to the name of the computer on which the LDAP server is running and the number of the port at which the LDAP server is listening. If you want WebLogic Server to connect to the LDAP server using the SSL protocol, use the SSL port of the LDAP server in the server URL. Default: "ldap://ldapserver:389"
Principal The distinguished name of the LDAP user that WebLogic Server uses to connect to the LDAP server. This user must be able to list LDAP users and groups. Default: null
Credential The password that authenticates the LDAP user defined in the Principal attribute. This password is automatically encrypted. Default: nullEncrypted: yes
Enable SSL Enables the use of the SSL protocol to protect communications between the LDAP server and WebLogic Server. Keep in mind the following:
Disable this attribute if the LDAP server is not configured to use the SSL protocol.

If you set the User Authentication attribute to external, this attribute must be enabled.
Default: falseValid values:
true

false

Auth Protocol The type of authentication used to authenticate the LDAP server. Set the attribute to one of the following:
None for no authentication.

Simple for password authentication.

CRAM-MD5 for certificate authentication.
Netscape Directory Server supports CRAM-MD5. Microsoft Site Server and Novell NDS support simple. Default: "none"Valid values:
none"

simple"

CRAM-MD5"

Attribute Label	Description	Value Constraints
LDAPURL	The location of the LDAP server. Change the URL to the name of the computer on which the LDAP server is running and the number of the port at which the LDAP server is listening. If you want WebLogic Server to connect to the LDAP server using the SSL protocol, use the SSL port of the LDAP server in the server URL.	Default: "ldap://ldapserver:389"
Principal	The distinguished name of the LDAP user that WebLogic Server uses to connect to the LDAP server. This user must be able to list LDAP users and groups.	Default: null
Credential	The password that authenticates the LDAP user defined in the Principal attribute. This password is automatically encrypted.	Default: nullEncrypted: yes
Enable SSL	Enables the use of the SSL protocol to protect communications between the LDAP server and WebLogic Server. Keep in mind the following: Disable this attribute if the LDAP server is not configured to use the SSL protocol. If you set the User Authentication attribute to external, this attribute must be enabled.	Default: falseValid values: true false
Auth Protocol	The type of authentication used to authenticate the LDAP server. Set the attribute to one of the following: None for no authentication. Simple for password authentication. CRAM-MD5 for certificate authentication. Netscape Directory Server supports CRAM-MD5. Microsoft Site Server and Novell NDS support simple.	Default: "none"Valid values: none" simple" CRAM-MD5"