Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

AD LDS user's cn equal to user's sAMAccountName

$
0
0

The environment

I configured a AD LDS instance and sync it with an existing AD. To help and guide me in this process I followed this tutorials: http://www.thegeekispeak.com/archives/64 http://lab.technet.microsoft.com/en-us/magazine/dd228991

I am using a Windows 2008 R2 Server (the AD and AD LDS are running in the same server). I successfully manage to sync the AD LDS with the AD and at this moment I have all the objects that I want in the AD LDS. All objects are user proxies pointing to their corresponding AD objects.

The problem

I have a tomcat application, more exactly a Bonitasoft installation, to bind to this AD LDS so the users can login to the Bonita User Experience (Portal and process manager) Here is how I did: http://priyankacool10.wordpress.com/2012/07/25/how-to-configure-ldap-with-bonita-user-xp/

With this small adaptation:

BonitaAuth {
  com.sun.security.auth.module.LdapLoginModule REQUIRED
  userProvider="ldap://10.1.222.254:50000/CN=Users,CN=bonitadir,DC=ZZZ,DC=YYY,DC=XX"
  authIdentity="CN={USERNAME},CN=Users,CN=bonitadir,DC=ZZZ,DC=YYY,DC=XX"
  useSSL=false
  debug=true;
};

BonitaStore {
  org.ow2.bonita.identity.auth.LocalStorageLoginModule required;
};

It's working but not exactly like I wold expected: The problem is that the user proxy's "CN" is the same as "displayName" that is a normal name like "John Doe" not a expected user name like "jdoe".

Is there a way to sync the AD LDS with AD but make the "CN" at the user's proxy equal to perhaps sAMAccountName?

At this moment i have this:
     AD LDS     |        AD
-----------------------------------
  User's Proxy  |       User
       CN       =        CN


And I want this:
      AD LDS       |         AD
----------------------------------------
   User's Proxy    |        User
        CN         =   sAMAccountName

Can this be done, and how?

If you see a different and easier solution please let me know.

Thanks in advance:)

Best regards.


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>