Verified Answers

If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it!  Learn more

  • State Verified Answer
  • Replies replies
    3
  • Subscribers subscribers
    203
  • Views views
    139
  • Users 0 members are here
  • +1 person also asked this people also asked this
Related
Options

Sitescope only allowing certain LDAP users access

terry_summers

Hi all,

I have successfully setup Sitescope talking to our LDAP servers with an example context of DC=abc,DC=def,DC=ghij,DC=net (for our domain abc.def.ghij.net)
When the setting Enable same permissions for all LDAP users is ticked and set all is good.

However we are not wanting everyone to be able to login.
So lets say we have a user called dummyfred in the AD and they are a part of an AD group called Sitescope?
Is there a way to restrict LDAP login to only users who are a part of the Sitescope AD group?

I tried setting up individual users but could not get the idea of the user context, much the same with the roles.
Would someone be able to explain this part of the LDAP integration using my above test case?

Thanks,
Terry

Tags:

  • 0  

    Hi Terry,

    yes, I think it is possible.

    You need to provide LDAP Context and provide the AD group that you want to allow login to SiS.

    In my lab, I created LDAP group named "sis" with only 1 user. This is the LDAP settings page:

    and here is the test result:

    and here is the test result when I removed the LDAP context filtering:

  • 0 in reply to   

    Thanks Asaf,


    OK, I've tried that after finally figuring out the LDAP context for the group but it looks like it is picking up the group itself.
    I also get 1 user was found for the group but the group has 3 members.
    Could that be something to do with the advanced settings?

  • Verified Answer

    +1 in reply to 

    OK, I have found the answer.
    The Sitescope documentation can be quite confusing talking about contexts for users. That is not needed.
    What I found was an old HP slideshow (looked like training) from when Sitescope was owned by HP.

    What you do is setup up the LDAP settings and context as per normal so for my example context was DC=abc,DC=def,DC=ghij,DC=net
    Make SURE to leave Enable same permissions for all LDAP users UNTICKED.
    Then create a new user role which has the exact same name as an AD group.
    From there you can create permissions for that group and it is all based on the domain users in that group.
    So I created a SiteScope-Admin and Sitescope-User AD group and added them as user roles.
    Rest of the domain can't login to sitescope,SiteScope-Admin group has full rights and Sitescope-User has anything delete disabled.

    Thanks for trying to help.

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.