Questions Tagged With ldap

How to migrate Active Directory connection to LDAP(S) / SSL

SupportIvyTeam — Wed, 29 Apr 2020 05:39:52 -0400

Microsoft is enforcing LDAPS for active directory services. https://www.heise.de/newsticker/meldung/Microsoft-stellt-Domaincontroller-langsam-auf-LDAPS-um-4666079.html

So we have to configure all ivyEngine user synch connections to use LDAP(S). How can this be done? Simply enabling 'SSL' option doesn't seem to be enough.

We have multiple workflow app on differen ivyEngine (4.3, 5.1, 7.0) versions in use. Is there a generic approach to use that works als in older environments?

Troubleshoot ActiveDirectory user import to my ivy 3.9 webApp

SupportIvyTeam — Wed, 01 May 2019 03:02:29 -0400

I have to maintain a legacy workflow app still running with XpertIvy 3.9. The users of the application are synchronized from our MS Active Directory.

Recently I got reports that some users are not able to connect to the WebApp. What can I do to verify and trace the ActiveDirectory user synchronization?

Lazy / On-demand Synchronization of LDAP Users

SupportIvyTeam — Mon, 29 Apr 2019 09:53:15 -0400

In our project we are using Microsoft AD as our security system. Our access policy is that anyone working in our company is allowed to access our Ivy application.

Our problem now is that daily user synchronization and user filtering in our code is quite slow as we have over 50'000 possible users to synchronize, even though our application is only used by a couple of thousand users.

Is it possible to 'lazy load' users, only adding users to our Ivy system database on first usage / login? And not on first synchronization with our AD system? But still updating users that have been changed in AD during synchronization?

Fast LDAP user lookup at runtime

SupportIvyTeam — Wed, 14 Nov 2018 03:08:54 -0500

In my project I read users at runtime via Ivy API: SecurityContext.findUser("theUser");

This works reasonably well in my company environment. But if I deploy the project the the productive engine (to the cloud) this user lookups can take up to 2 minutes. At least if I search for a not existing user? How can I speed it up? The security system here is configured to use an LDAP. Shouldn't this be a fast protocol?

How can I specify additional properties/attributes for an External Security System?

SupportIvyTeam — Tue, 05 Aug 2014 11:43:02 -0400

If I use Microsoft Active Directory or Novel eDirectory as External Security System is there any possibility to specify an additional environment property / attribute? Examples are java.naming.referral (which is on Ivy set to follow per default) or java.naming.ldap.derefAliases etc.