Apart from Window’s AD (Active Directory), a number of other LDAP server implementations are in usage, including “open source” solutions such as Apache Directory Server and OpenLDAP. As with Windows AD, LDAPv2 or LDAPv3 may be used, and Kerberos authentication may be available. Such LDAP systems also use a tree-type directory structure of entries, each with sets of attributes.
When integrating any of these LDAP systems with NiagaraAX stations, you replace each station’s standard UserService with one of the following user services:
LdapUserService
Only for an LDAPv2-based system, and without availability of Kerberos authentication. Essentially this is the same LDAP user service provided in the NiagaraAX ldap module since AX-3.1.
LdapV3UserService
For an LDAPv3-based system, with the availability of Kerberos authentication. Starting in AX-3.8, the ldap module provides this for all NiagaraAX platforms. The host platform must be licensed with the feature “ldapv3”. If Kerberos authentication is used, the “ldapv3” feature requires the attribute kerberos=”true”.
Copyright © 2000-2014 Tridium Inc. All rights reserved.