uCMDB Rest API to work with LDAP accounts

[Rancr]

Due to security within the company, we need to be able to use the UCMDB API with AD Authenticated ids, and not local ids only in order to execute the UCMDB API. This appears to be not capable at this time and only works with local accounts. 
We are embarking on significant use of the UCMDB API for a variety of use cases and security does not allow us to use local accounts for such matters.

[David Gallant]

I think this is a necessary set of functionality to control use and adoption at any company, big or small.   Most corporations do not allow from a security perspective non-AD accounts in order to manipulate, show, or use data so this is critical for those types of companies 

[doronorbach]

The idea has received an initial review to ensure adherence to our idea submission and community guidelines. We ask the community to help prioritize the idea with comments and community support (votes/kudos).

[DominikB]

I think this is a very important and basic feature. This should have been part of the REST API from the beginning. Also I find it nowhere in the documentation that there is this limitation...

[doronorbach]

Thank you for the contribution. We will review the available options to implement in a future release.

[doronorbach]

As I learnt today  UCMDB SDK and REST API are working with LDAP users.

 you will need also set the user repository in order to improve the performance.

 Example:

SDK:

private static final String USER_NAME = "*****";
private static final String PASSWORD = "****";
private static final String USER_REPOSITORY = "myd-vm05190.hpswlabs.adapps.hp.com";
/**
* Creates a UCMDB SDK connection.
*
* @return UcmdbService object with all of the available services
* @throws java.net.MalformedURLException in case of a wrong host/protocol/port input
*/
public static UcmdbService createSDKConnection() throws MalformedURLException {
    //Creating a service provider for a given UCMDB server address
    UcmdbServiceProvider serviceProvider = UcmdbServiceFactory.getServiceProvider(PROTOCOL, HOST, PORT);
    //Creating a client context according to the name of this integration (for auditing)
    ClientContext clientContext = serviceProvider.createClientContext("MyAppName");
    //Creating the credentials for authentication
    Credentials credentials = serviceProvider.createCredentials(USER_NAME, PASSWORD, USER_REPOSITORY);
    // Creating the connection object
    return serviceProvider.connect(credentials, clientContext);
}

REST:

POST HTTPS Request on URL: https://<UCMDBServer>:8443/rest-api/authenticate

{

                "username":"****",

                "password":"****",

                "repository": "myd-vm05190.hpswlabs.adapps.hp.com",

                "clientContext": 1

}

If the LDAP URL is:

ldap://myd-vm05190.hpswlabs.adapps.hp.com:20507/ou=UCMDBOrganization,dc=hpswlabs,dc=adapps,dc=hp,dc=com

The repository for users is: myd-vm05190.hpswlabs.adapps.hp.com

[SKAZAL_]

Is this version dependent?

[doronorbach]

10.31+

[doronorbach]

As we do provide this functionality, please let us know if this is not working as required.

[RichardS]

Our security standards also need LDAP authentication to use the Rest API. We have a number of requirements that cannot currently be delivered. We've tested with a UCMDB managed account and the API delivers what is required. We're just not allowed to deploy in Production.