The Alkacon OCEE LDAP Connector

With the Alkacon OCEE LDAP connector, full integration of existing LDAP user directories with the OpenCms permission system is available. The connected LDAP server can be used to fully replace or in addition to the standard Database User and Group Management. Full integration of LDAP users and Groups allow using these for all OpenCms authentication and ACL permission management. Optionally, the Web interface generated by OpenCms can be used to change the password of an already logged in user.

Please note: LDAP user repository data must be organized according to RFC 2256 (attribute types) und RFC 2798 (inetOrg object class). Most LDAP standard user repositories implement these RFC. The LDAP connection is "read only", i.e. management of information stored in the LDAP server is not possible with this module (except for changing the password).

Some screenshots:

LDAP Overview Page

Click on the image for a full size version

The LDAP Connector overview page provides access to the available LDAP tools for managing groups and users or synchronization tasks.

LDAP User Management

Click on the image for a full size version

The LDAP User Management shows the list of LDAP users available in OpenCms. Additional user attributes like address data, or LDAP group memberships can optionally be shown.

LDAP User Overview

Click on the image for a full size version

The LDAP User Overview displays information about an LDAP user, read from the LDAP repository.

LDAP User Synchronization

Click on the image for a full size version

Synchronization with the LDAP repository happens automatically when a user logs in to OpenCms. In addition to that, the User Synchronization allows the manual synchronization of selected users with the LDAP server. It clearly shows the synchronized and not synchronized users. Add or remove one or more users from the synchronization list by selecting them and clicking the corresponding buttons.