{"id":1818,"date":"2010-06-01T17:59:43","date_gmt":"2010-06-01T21:59:43","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2010\/06\/01\/integrate-ucm-ecmcontent-server-with-microsoft-active-directory-as-ldap-provider\/"},"modified":"2010-06-01T17:59:43","modified_gmt":"2010-06-01T21:59:43","slug":"integrate-ucm-ecmcontent-server-with-microsoft-active-directory-as-ldap-provider","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2010\/06\/01\/integrate-ucm-ecmcontent-server-with-microsoft-active-directory-as-ldap-provider\/","title":{"rendered":"Integrate UCM (ECM\/Content Server) with Microsoft Active Directory as LDAP Provider"},"content":{"rendered":"

Content server is key component of Oracle Enterprise Content Management (ECM) or Universal Content Management (UCM). More on UCM’s architecture here<\/a><\/p>\n

If you are new to Security in UCM\u00a0then check Groups and Accounts here<\/a><\/p>\n

In this post I’ll show you how to configure UCM with Active Directory as LDAP Provider <\/strong>for external security\u00a0(Note* This integration process i.e. Active Directory as LDAP Provider is different from direct AD integration<\/font>)\u00a0<\/p>\n

.<\/p>\n

Things good to know for UCM integration with External Security<\/u><\/strong><\/p>\n

1.<\/strong> Content Server provides following security options
\na) Internal Security<\/strong> – This is default configuration where you set up users, assign roles and accounts using\u00a0 the User Admin Applications.<\/p>\n

b) External Security<\/strong>– You can configure Content Server with external LDAP servers (MS-AD, OID, iPlanet…) so user login, password and permissions are derived from one of external user base<\/p>\n

i) Active Directory<\/strong> : User information is stored in Active Directory
\nii) LDAP<\/strong>: User information is stored in LDAP compliant directory server (OID, iPlanet, IBM Tivoli DS..)
\niii) Active Directory with LDAP<\/strong> : User information is stored in Active Directory but Content Server access user information (sitting in Active Directory) using LDAP provider (This integration is covered in this post<\/font>)<\/p>\n

.
\n2.<\/strong> First time an external user (user sitting in external source) logs in, they are added to database.<\/p>\n

3.<\/strong> Files required for UCM integration with Active Directory with LDAP Provider (section iii in external security section above) are available in $CONTENT_SERVER_INSTALL_DIR\/ custom\/ActiveDirectoryLDAPComponent<\/strong><\/p>\n

4. <\/strong>In Content Server, you can combine authentication methods i.e. allow some users to login to using their Microsoft Domain identity while others using LDAP Provider. You could also configure multiple LDAP Providers for authentication.<\/p>\n

.\u00a0<\/p>\n

Integration of UCM with Microsoft Active Directory LDAP Provider
\n<\/u><\/strong>
\n1. <\/strong>Create an LDAP Provider for Active Directory (Change Provider class to ldap.ActiveDirectoryLdapProvider<\/strong><\/font>)
\n1.1 <\/strong>Login to content server as sysadmin\u00a0\u00a0 http:\/\/server:port\/idc<\/strong>\u00a0 (sysadmin\/idc)
\n1.2<\/strong> Click Administration<\/strong> -> Provider<\/strong>
\n1.3 <\/strong>Click on “Add<\/strong>” under “ldapuser<\/strong>”
\n.<\/p>\n

<\/a><\/a><\/p>\n

.<\/p>\n

<\/a><\/p>\n

.<\/p>\n

In above case Active Directory is
\n– Running on machine win01.onlineappsdba.co.uk<\/strong> on port 389
\n– Users are stored in ou=UK,ou=myUsers,dc=onlineappsdba, dc=co,dc=uk
\n– Change Provider Class to ldap.ActiveDirectoryLdapProvider<\/font>
\n.<\/p>\n

<\/a><\/p>\n

.
\nDomain Controller for Active Directory is onlineappsdba<\/strong> and administrator<\/strong> is super user<\/p>\n

.<\/p>\n

<\/a><\/p>\n

.<\/p>\n

1.4<\/strong>Restrat Content Server
\n1.5<\/strong> Verify connection status forldap provider<\/strong> configured above<\/p>\n

.<\/p>\n

<\/a><\/p>\n

.\u00a0<\/p>\n

1.6<\/strong>Login to Content Server with user in Active Directory (You should now be able to login with AD user in IDC)<\/p>\n

1.7<\/strong> Check table db_admin.users<\/strong> (db_admin<\/strong> is schema name for Content Server)
\nDUSERAUTHTYPE<\/strong> column should be set to external<\/p>\n

.
\n<\/a>
\n\u00a0<\/p>\n

.<\/p>\n

References
\n<\/u><\/strong><\/p>\n