Active Directory
/etc/ldap.conf
To improve login speeds, edit /etc/ldap.conf to use the following
# Note: This will effectively disable DISID groups, # though `getent group | wc -l` returns the same result nss_base_group dc=general,dc=disney,dc=private?sub?&(objectClass=group)(gidNumber=*)
General
General appears to have the entire WdigUsers and WdigServiceAccounts OUs imported, though mapped to different OUs.
| Host | IP | Port |
|---|---|---|
| n7gen01dmct01.general.disney.private | 10.190.254.11 | 389 |
| n7gen01dmct02.general.disney.private | 10.190.254.12 | 389 |
PHP Config
system.inc.php
$cfg['UserController']['LdapUsername'] = '_diw_gx_auth';
$cfg['UserController']['LdapPassword'] = '********';
$cfg['UserController']['LdapGroupDN'] = 'OU=Groups,OU=DI,DC=general,DC=disney,DC=private';
$cfg['UserController']['LdapUserDN'] = 'OU=DISID,OU=ImportedUsers,DC=general,DC=disney,DC=private';
$cfg['ldap'] = array(
array(
'host' => '10.190.254.11',
'port' => 389,
'useSsl' => false,
'useStartTls' => false,
'accountDomainName' => 'general.disney.private',
'accountDomainNameShort' => 'general',
'accountCanonicalForm' => 3,
'baseDn' => 'DC=general,DC=disney,DC=private',
),
array(
'host' => '10.190.254.12',
'port' => 389,
'useSsl' => false,
'useStartTls' => false,
'accountDomainName' => 'general.disney.private',
'accountDomainNameShort' => 'general',
'accountCanonicalForm' => 3,
'baseDn' => 'DC=general,DC=disney,DC=private',
),
);
Java Config
ldap.properties
ldap.url=ldap://10.190.254.11:389/ ldap.domain=general.disney.private ldap.userDn=CN=_diw_gx_auth,OU=DISID,OU=ImportedUsers,DC=general,DC=disney,DC=private ldap.password=******** ldap.dn.users=ou=DISID,ou=ImportedUsers,dc=general,dc=disney,dc=private ldap.dn.groups=ou=Groups,ou=DI,dc=general,dc=disney,dc=private