BusinessObjects Enterprise Administrator's Guide

Configuring the LDAP host

To configure the LDAP host

1. Go to the Authentication management area of the CMC.
2. Click the LDAP tab, and then click "Start LDAP Configuration Wizard".

The LDAP Configuration Wizard will lead you through the setup of LDAP authentication, step by step.

3. The first screen of the wizard asks for information about your LDAP host. Type your LDAP host and port information in the Add LDAP host (hostname:port) field (for example, "myserver:123"); then click Add.

Repeat this step to add more than one LDAP host of the same server type if you want to add hosts that can act as failover servers. If you want to remove a host, highlight the host name and click Delete. For more information on multiple hosts, refer to Managing multiple LDAP hosts.

4. Click Next.
5. Select your server type from the LDAP Server Type list. Click Show Attribute Mappings if you want to view or change any of the LDAP Server Attribute Mappings or the LDAP Default Search Attributes.

By default, each supported server type's server attribute mappings and search attributes are already set.

6. Click Next.
7. In the Base LDAP Distinguished Name field, type the distinguished name (for example, o=SomeBase).
8. Click Next.
9. Enter the credentials required by the LDAP hosts.
• In the "LDAP Server Administration Credentials" area, type the distinguished name and password for a user account that is authorized to administer your LDAP server.

  If your LDAP Server allows anonymous binding, leave this area blank—BusinessObjects Enterprise servers and clients will bind to the primary host via anonymous logon.

• Enter another distinguished name and password in the "LDAP Referral Credentials" area if all of the following apply:
  • The primary host has been configured to refer to another directory server that handles queries for entries under a specified base.
  • The host being referred to has been configured to not allow anonymous binding.
  • A group from the host being referred to will be mapped to BusinessObjects Enterprise.

    Although groups can be mapped from multiple hosts, only one set of referral credentials can be set. Therefore if you have multiple referral hosts, you must create a user account on each host that uses the same distinguished name and password.

10. Enter the number of referral hops in the Maximum Referral Hops field.

If this field is set to zero, no referrals will be followed.

11. Click Next.
12. Proceed with configuring the Secure Socket Layer.