Answers to: How can I specify additional properties/attributes for an External Security System?

Answer by Christian Strebel

Christian Strebel — Wed, 14 Nov 2018 09:59:30 -0500

With 7.2 and later:

Just configure it in the ivy.yaml like this:

SecuritySystems:
  myActiveDirectory:
    Provider: "Microsoft Active Directory"
    Connection:
      Url: ldap://localhost:389
      Environment:
        # Specifying how referrals encountered by the service provider are to be processed. Possible values are... follow, ignore, throw
        # https://docs.oracle.com/javase/jndi/tutorial/ldap/referral/index.html
        "java.naming.referral": ignore

See the ivy.yaml file reference section in the engine guide.

Answer by Christian Strebel

Christian Strebel — Tue, 05 Aug 2014 12:15:29 -0400

It is also possible to set the properties per API. Just create a Simple helper Project/Process and upload it to the Server with the following Code:

// set additional property "java.naming.referral" to "ignore"
ivy.request.getApplication().getSecurityContext()
.getConfigurationProperty("JndiAAA.AddEnv.java.naming.referral").setValue("ignore");

// remove additional property "java.naming.referral"
ivy.request.getApplication().getSecurityContext()
.getConfigurationProperty("JndiAAA.AddEnv.java.naming.referral").setValue(null);

Answer by Christian Strebel

Christian Strebel — Tue, 05 Aug 2014 12:05:07 -0400

Before 7.2:

Yes this is possible, but unfortunately not configurable by the Administration UI by now. The following Steps are needed if you do it by Admin UI and Database Editor:

Configure the additional properties by using the Administration UI and add them to the User Properties
Stop the Ivy Server/Engine
Open a Database Editor and go to table IWA_ApplicationProperty
Change the PropertyName from JndiAAA.UsrAttr.yourAdditionAttributeKey to JndiAAA.AddEnv.yourAdditionAttributeKey (e.g. JndiAAA.UsrAttr.java.naming.referral to JndiAAA.AddEnv.java.naming.referral)
Start the Ivy Server/Engine, the additional attributes are now used