|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
Integration Bus Web User Interface LDAP Authentication |
« View previous topic :: View next topic » |
Author |
Message
|
LoQutus |
Posted: Wed Nov 02, 2016 2:24 am Post subject: Integration Bus Web User Interface LDAP Authentication |
|
|
Newbie
Joined: 02 Nov 2016 Posts: 3
|
Hi,
At one of my customers, we're using LDAP authentication for the Web User Interface.
My question is: "Can we enter multiple LDAP server hostnames or IP addresses in the ldapAuthenticationUri ? Maybe in the form of a comma-separated-value ?"
The customer has multiple LDAP servers (for failover / redundancy reason).
Regards,
Bram - LoQutus |
|
Back to top |
|
 |
LoQutus |
Posted: Wed Nov 02, 2016 2:27 am Post subject: ldapAuthenticationUri |
|
|
Newbie
Joined: 02 Nov 2016 Posts: 3
|
|
Back to top |
|
 |
Vitor |
Posted: Wed Nov 02, 2016 4:20 am Post subject: Re: Integration Bus Web User Interface LDAP Authentication |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
LoQutus wrote: |
The customer has multiple LDAP servers (for failover / redundancy reason). |
How does your customer expose these multiple servers to other LDAP users; i.e how does (for example) a WAS server reach one or another LDAP server, especially if the LDAP server it was previously using goes down?
Use that same technique for IIB.
I would suspect the customer has these servers behind an F5. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
LoQutus |
Posted: Wed Nov 02, 2016 4:55 am Post subject: |
|
|
Newbie
Joined: 02 Nov 2016 Posts: 3
|
Hi,
1/ LDAP servers behind a network load balancer, virtual IP, etc... could be an option; I'll ask the customer what is possible with their current infrastructure..., but I was looking for the possibilities / capabilities within the IIB product itself
2/ for WAS, you can define additional LDAP servers in the configuration
3/ for IIB, I've talked to someone of IBM, he told me that for the moment you can only define one entry for the ldapAuthenticationUri attribute
Regards,
Bram - LoQutus |
|
Back to top |
|
 |
Vitor |
Posted: Wed Nov 02, 2016 6:22 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
LoQutus wrote: |
2/ for WAS, you can define additional LDAP servers in the configuration |
Well I've learned something today. Our WAS people will be interested to learn that as well.....
LoQutus wrote: |
3/ for IIB, I've talked to someone of IBM, he told me that for the moment you can only define one entry for the ldapAuthenticationUri attribute |
As you'd expect from someone from IBM, that's right.
LoQutus wrote: |
1/ LDAP servers behind a network load balancer, virtual IP, etc... could be an option |
It's what we do. For IIB, WAS and all of our other LDAP consumers. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|