StreamBase Server can be configured to authenticate user names and entities against one or more LDAP servers. Since Microsoft Active Directory can provide LDAP services, you can use StreamBase LDAP support to authenticate against one or more Active Directory servers.
All LDAP configuration is managed with child elements of the
<security> element in the server configuration file. Initial documentation of the LDAP configuration elements is found in the skeleton
configuration file. Generate such a file with either of these methods:
In Studio, run Populate with default configuration comments.→ → . In the next dialog, select the check box for the option labeled
At the StreamBase Command Prompt, run a command like the following:
sbd -s > sbconf-skel.txt
For StreamBase Server to successfully communicate with an LDAP server, it must have its own distinguished name and password. This DN does not need to have access rights to other LDAP servers or services.
Specify the server's DN and password with
<param> elements like this example:
<security> <ldap> ... <param name="root-dn" value="cn=SBServer1,cn=Users,dc=ldap,dc=example,dc=com" /> <param name="password" value="secret" /> ... </ldap> </security>
Each StreamBase connection that requires authentication uses the user name and password provided to StreamBase Server to connect to the configured LDAP servers. If the user name and password connects successfully, any role attributes defined in the configuration file are read and checked. If not, access is denied.