ldap.conf

ldap:context-source

enabled

ldap__service__enabled

true / false

Enables LDAP integration on the server side.

url

ldap__service__url

ldaps://your.ldap.url:port

Url for DirectoryService, preceded by the protocol and ending with the port

base

ldap__service__base

ou=user,DC=ldap,DC=url

The base to start in the DirectoryService

userDn

ldap__service__userDn

maxservice@yourldap.url

A service user for the DirectoryService to have access to it

password

ldap__service__password

mysecretpassphrase

The password for the service user

baseEnvironmentProperties

ldap__service__java__naming__ldap__attributes__binary

Map

A list of properties that are passed on to LDAP.

The listed attributes for the  java.naming.ldap.attributes.binary  key are read as binary values.

If there is more than one attribute, they must be separated by spaces, e.g.:

<map>

  <entry key="java.naming.ldap.attributes.binary" value="objectGUID"/>

</map>

In the case of the environment variable, only a String must be assigned, e.g. 'objectGUID'

S 39.5.34

bean:ldapConfig

ldapUserFilter

ldap__attributes__ldapUserFilter

String

A hard coded filter to narrow down the search area

These are the recommended PLANTA groups to assign users to roles from the DirectoryService. Each of these groups references a role in PLANTA project:
- PLANTAProject_Administrator
- PLANTAProject_Employee
- PLANTAProject_ProjectManager
- PLANTAProject_MultiProjectManager
- PLANTAProject_DepartmentManager
- PLANTAProject_PortfolioManager
- PLANTAProject_PMAdministrator

ldapSearchScope

ldap__attributes__ldapSearchScope

{SUBTREE / OBJECT / ONELEVEL}

The search scope for searches

S 39.5.34

plantaUserData

ldap__attributes__plantaUserData

Map

A list of all LDAP attributes that are written into the DB when a user logs in or by a query_user_data.

They are listed as key - value pairs.

The key that is flagged with login is used to authenticate the user.

The key that is flagged with uuid is converted into a UUID String and serves to log the user in.

At the moment, only text attributes are allowed, except for the objectGUID which is converted into a UUID String.

For example:

<map>

  <entry key="userPrincipalName" value="login"/>

  <entry key="mail" value=""/>

  <entry key="sAMAccountName" value=""/>

  <entry key="sn" value=""/>

  <entry key="objectGUID" value="uuid"/>

</map>

In the case of the environment variable an Array of Strings has to be assigned, e.g. {'userPrincipalName=login','mail=','sAMAccountName=','distinguishedName=','objectGUID=uuid'}

S 39.5.34