
Figure 3-30 Windows Active Directory authentication
HP DSS
server
LDAP server
Domain
controller
1. User credentials
(DSMP-encrypted)
6. Authentication user’s
e-mail address
3. Authentication result
(API-encrypted)
2. User credentials
(API-encrypted)
4. LDAP quer
y
5. Query re
sults
Windows Two Server authentication
DSS can be configured to use an LDAP database other than the Active Directory database for user
data retrieval. The configuration for Two Server authentication is partially done using the Windows
authentication user interface and partially done using a configuration file.
All of the fields in the user interface are still used except for the Match the name entered with this
attribute and Retrieve the user's e-mail address using this attribute fields. The Trusted Domains and
Windows default domain settings from the user interface are still required.
The configuration used for Windows Two Server authentication is:
<install folder>\FileSystems\Product\Dss\Configuration
\HP.Dss.App.Utilities.TwoServerAuthentication.xml
Use this file to configure information DSS needs to find and access the LDAP database and which
attributes to retrieve. See the documentation in the file for further configuration information.
62 Chapter 3 Installation and configuration ENWW
Comentarios a estos manuales