How to configure multiple users and group bases ?
The properties com.frevvo.security.ldap.usersBase and com.frevvo.security.ldap.groupsBase define a root node to search for entries. The searches are recursive and will traverse the hierarchy starting from those nodes. If your multiple paths share a common base you can configure that value in these properties. For instance, lets assume the following bases:
| Code Block |
|---|
CN=Sales,CN=Users,DC=test,DC=windows,DC=frevvo,DC=com CN=HR,CN=Users,DC=test,DC=windows,DC=frevvo,DC=com CN=Marketing,CN=Users,DC=test,DC=windows,DC=frevvo,DC=com |
A common path among these is CN=Users,DC=test,DC=windows,DC=frevvo,DC=com and that is what you can configure for com.frevvo.security.ldap.usersBase for instance.
Can I have more than one LDAP tenant ?
Yes, you can configure as many tenants as you want but they will all share the same configuration.
Can I connect to more than one LDAP Server ?
That is not supported. You can only connect to one server.
How can I configure the
...
Live Forms designers ?
The frevvo designers The designers will be whatever members are returned by the LDAP filter configured in the property com.frevvo.security.ldap.frevvoDesignersFilter. It can essentially be any valid LDAP filter. One approach used by some customers is to created a group of frevvo designers designers in LDAP (Active Directory for instance), associate members to that group using whatever client is typically used to manage the names in your organization and configure that group in frevvo . For instance:
<Parameter name="com.frevvo.security.ldap.frevvoDesignersFilter" value="(memberOf=CN=FrevvoDesigners,CN=Users,DC=test,DC=windows,DC=frevvo,DC=com)" override="false"/>
...
If cache is enabled (it is enabled by default), you may need to restart the frevvo server server for the changes to take effect