Read this topic to... |
---|
|
Once a user has been authenticated using either the LDAP login authority or web server authentication, Tarantella can use an LDAP directory server to determine the webtop the user should receive. The content of the webtop is controlled by:
For an LDAP user, Tarantella uses the first login profile it finds out of the following:
cn=LDAP Profile
, in the same organizational unit (OU) as the LDAP person object.cn=LDAP Profile
, in any parent OU for the LDAP person object.o=Tarantella System Objects/cn=LDAP Profile
.Tarantella makes allowances for the differences between the LDAP and ENS naming systems.
For example, if the LDAP object cn=Indigo Jones,ou=Administration,o=Indigo Insurance
is found,
Tarantella searches ENS for o=Indigo Insurance/ou=Administration/cn=Indigo Jones
.
If you defined a search root as part of the URL of the LDAP directory server, Tarantella disregards the search root when searching for the login profile.
If you are using web server authentication:
To be able to use a login profile other than the default LDAP profile
(o=Tarantella System Objects/cn=LDAP Profile
), you have to:
Cust-o-dat
application but no-one else in Finance is allowed to access it.To give users the webtops they need, you could create the following objects in the organizational hierarchy:
Directory server type | Microsoft Active Directory | Sun™ ONE Directory Server |
---|---|---|
LDAP paths | cn=Finance,dc=indigo-insurance,dc=com cn=Marketing,dc=indigo-insurance,dc=com cn=Sid Cerise,cn=Finance,dc=indigo-insurance,dc=com | ou=Finance,o=indigo-insurance.com ou=Marketing,o=indigo-insurance.com uid=Sid Cerise,ou=Finance,o=indigo-insurance.com |
Object Manager hierarchy | ||
Notes | You must use domain component and Active Directory container objects to mirror your LDAP organization. | You must create the person object using a uid= prefix.
Use BACKSPACE to delete the Tarantella default cn= prefix for person objects
and then type uid= . You can only do this when you
create the object. Once the object has been created, you cannot amend the cn= part of the name. |
With this organizational hierarchy:
cn=LDAP Profile
objects. They also
inherit webtop content
from parent OU objects in the organizational hierarchy.
o=Tarantella System Objects/cn=LDAP Profile
object.