OTM and LDAP (OID)

wlirio · #1 (**permalink**) January 29th, 2008, 20:06

Hi,
We are trying to integrate OTM 5.5.3 with OID using the LDAP configuration.
On the documentation there is a section that talks about extending the LDAP directory to include the GLUSER Attribute.
Quote from Install Doc "

OTM requires that the user ID field be part of the Distinguished Name (at least externally to an LDAP
client). It also requires that each LDAP user object to be authenticated with OTM be populated with
the GLUSER attribute. The GLUSER attribute should not be part of the Distinguished Name."
End Quote

I am not sure what is the GLUSER.

Thanks,

chrisplough · #2 (**permalink**) January 30th, 2008, 18:46

Hello,

the GLUSER is the G-Log (OTM) UserID, in the form of DOMAIN.USERNAME -- for instance GUIEST.ADMIN or COMPANY.LOUISE.

Just a little advice as you start looking itno this, I'd highly recommend using SSO (single sign-on) instead of the LDAP integration. With LDAP, you need to keep two copies of the OTM user's password - one in OTM and one in your LDAP directory and they must always be in sync. Instead, with SSO, you just keep the password in your SSO's repository and OTM simply accepts the userID passed to it, without doing it's own authentication. OTM's security remains intact and it's much easier to use.

--Chris

wlirio · #3 (**permalink**) February 4th, 2008, 17:24

Thank for clarifying the GLUser. Regarding SSO I read somewhere that OTM 5.5.3 does not support SSO which why I went the LDAP route.

chrisplough · #4 (**permalink**) February 4th, 2008, 18:44

You're welcome. On the SSO side, I haven't seen any notes, but I can't imagine it not working in CU03, because some very high profile clients are using it.

--Chris

rsadani · #5 (**permalink**) February 12th, 2008, 17:26

We are also in similar stage of installing a access management tool for controlling access to service providers. We are planning to use Siteminder as a SSO tool for access management (with OTM 5.5.4)
Are there any specific advises around this?
Thanks
Ravindra

chrisplough · #6 (**permalink**) February 12th, 2008, 19:09

Ravindra,

Several OTM / G-Log clients have used Siteminder SSO with OTM without issue -- I wouldn't expect you to have any issues. Just keep in mind that you'll need to configure OTM to use both SSO and the Reverse Proxy (URL Prefix) configuration.

--Chris