How to let your Openmeetings authenticate with AD account and password? 如何使openmeetings系統可用AD帳號登入??

First of all, you should edit a file to prepare for upload to Openmeetings.

Please updates the information as below and save it as a file. choosing a file name whatever you like to save.

below is a sample, please especially notice those sections in red. and change your local environmental parameters.

#ConfigurationFile for LDAP Auth
#ConfigKey ‘ldap_config_path’ must be set in DataBase Configration of OM and point to this file
#o.becherer,14.01.2009

#specify the LDAP Server type
ldap_server_type=AD
#ldap_server_type=ActiveDirectory
#LDAP URL
# This is the URL used to access your LDAP server.
ldap_conn_url=ldap://Your_IP_Address_change_here:389

#Login distinguished name (DN) for Authentification on LDAP Server – keep emtpy if not required

#once your administrator account is admin, and AD domain URL is test.com
ldap_admin_dn=CN:admin,CN:Users,DC:TEST,DC:COM

#Loginpass for Authentification on LDAP Server – keep emtpy if not requiered
ldap_passwd= input_your_admin_password_here

#base to search for userdata(of user, that wants to login)
ldap_search_base=DC:TEST,DC:COM

# Fieldnames (can differ between Ldap servers)
field_user_principal=userPrincipalName
#field_user_principal=sAMAccountName
# Ldap auth type(SIMPLE,NONE)
ldap_auth_type=SIMPLE

# Ldap-password synchronization to OM DB
ldap_sync_password_to_om=no
# Ldap user attributes mapping
# Set the following internal OM user attributes to their corresponding Ldap-attribute
ldap_user_attr_lastname=sn
ldap_user_attr_firstname=givenName
ldap_user_attr_mail=mail
ldap_user_attr_street=streetAddress
ldap_user_attr_additionalname=description
ldap_user_attr_fax=facsimileTelephoneNumber
ldap_user_attr_zip=postalCode
ldap_user_attr_country=co
ldap_user_attr_town=l
ldap_user_attr_phone=telephoneNumber

and then, find the configuration section on your administrative interface of openmeetings as below image:

upload your saved file, and suggest you select “add domain to username”, and input your domain over there, in this example, test.com on it.

if you select this, your user don’t need to input domain name behind ad account like this username@test.com.

By Kevin

發佈留言