Skip to main content
Participant
March 15, 2007
Question

LDAP Integration and Password Authentification

  • March 15, 2007
  • 31 replies
  • 16562 views
Hi,

I have got a Connect Enterprise Server up and running. Now I configured the LDAP Connection to import the User and Groups from our Windows Server 2003 Active Directory Services. Now after this import the imported useraccounts don't have an initial password.

It looks like there are three ways to go on with the password authentification which is explained in the install guide.

1. Do nothing, means I set up a Authentification Proxy to do the user/password check for a Single-Sign-On
2. send an email to all users to change/set their password
3. set the password to an existing LDAP field value

It seems to me that it is not possible to check the password "realtime" (live at the login) against the real LDAP password without setting up a proxy or any other authentification instance. Or is this wrong? I don't need a Single-Sign-On, I just wan't the Users Windows Password to be also their Adobe Connect Password.

We are using another software in our company which exactly do this. You can also import the user account (external users) so you must not create it manualy. Now, when you login, the software check if your useraccount exists in the LDAP, and when this check is true the password will be chekced too. Otherwise the useraccount will be checked against the user and password entries in the local database (internal users). If these checks fail the user is a guest or the login will be rejected.

Is it possible to configure the Adobe Connect Server as well?

Thx
    This topic has been closed for replies.

    31 replies

    Participant
    March 16, 2007
    Hi John,

    There is no way Connect can retreive your user's AD passwords. In your case the best would probably be to set up NTLM authentication. If a user is authenticated on your AD and the account has been imported in the Connect database, the user get automatically logged in. Then you only need to set passwords for users who need a Connect account but have no AD account.

    An other solution is HTTP header authentication, but in this case you need your own authentication mechanism.

    HTH

    vincent
    March 16, 2007
    Actually, talk to your Adobe rep about a BSA that will authenticate users real-time against an LDAP. I'm not over-familiar with it, but I know it exists.