Usin ldap configuration file on the esight to bind spacific group

Created: Nov 1, 2018 10:43:52Latest reply: Nov 1, 2018 23:09:37 848 1 5 0 0

I faced an Issue which is after configured the esight to authenticate using AD and creating AD group (on AD and esight ) to manage the esight .. I discovered that all the AD users can access the esight page without privilege but the requirement is that no one can access the page even without privilege except the created group for this purpose .

To accomplish this requirement, there is an important configuration file called ldapAuth.cfg ... The Authentication module uses the configuration parameters in ldapAuth.cfg to communicate with Lightweight Directory Access Protocol (LDAP) server for user authentication function.

you can find this file in this path :

eSight/AppBase/etc/oms.sm/ldapAuth.cfg

in order to indicate the group name and then only the group members can login .

The AD group name was Esight Access Group and to make this only group to access the esight we need to change the userbindgroup parameter in the ldapauth.cfg file .

So Right click on the ldapauth.cfg then edit it with text editor and add the parameter :

Now only this group can access the esight webpage .

Note that there are a lot of useful parameters you can modify to control the authentication process between esight and ldap server .... Please check this link for more details :

http://support.huawei.com/hedex/pages/EDOC1000184142AEH01028/04/EDOC1000184142AEH01028/04/resources/cfgfile/SemiXML(0016119902)/en-us_topic_0095022082.html?ft=0&fe=10&hib=13.2.1.21&id=EN-US_TOPIC_0095022082&text=ldapAuth.cfg&docid=EDOC1000184142

From group: Enterprise Support Group