Integrating with multiple LDAP directories AEM 6.1 | Community
Skip to main content
Level 2
April 19, 2017
Solved

Integrating with multiple LDAP directories AEM 6.1

  • April 19, 2017
  • 7 replies
  • 2009 views

Hi,

Could you please tell me process of integrating with multiple LDAP directories? In our case , we have two different domains - each has its own LDAP for user access. 
We need to integrate both LDAP directories to AEM. Currently we are using 6.1 version.

Thanks,
Hari

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by joerghoh

Hi,

Regarding your 2 LDAP directories: Are there collisions in the usernames, that means that a username appears in directory a AND in directory B? If that's not the case, you can just configure both as recommended by the others; AEM will then query first directory A and in case of a miss directory B.

If this isn't the case and there accounts with the same username in both directory A and B, I don't see any chance to make that work reliably. Because on the AEM side you don't operate with the full full qualified LDAP name, but typically only with the user ID. And if this ID is not unique, you will run into issues.

Jörg

7 replies

smacdonald2008
Level 10
April 19, 2017

Here is a LDAP article that shows how to hook up Apache DS: 

https://helpx.adobe.com/experience-manager/using/configuring-aem6-apache-directory-service.html

You can try to hook up multiple services. I personally have never tried more than 1. 

joerghoh
Adobe Employee
Adobe Employee
April 19, 2017

Hi,

you are talking about publish? And you you want to use a LDAP server depending on what site/domain the user visits?

Jörg

MC_Stuff
Level 10
April 20, 2017
Level 2
April 20, 2017

smacdonald2008 wrote...

Here is a LDAP article that shows how to hook up Apache DS: 

https://helpx.adobe.com/experience-manager/using/configuring-aem6-apache-directory-service.html

You can try to hook up multiple services. I personally have never tried more than 1. 

 

Thank you for your response. I am looking for possibility of integrating with two different LDAP repositories to AEM as we have requirement to give access to two different domain users who are from two LDAP servers. 

Level 2
April 20, 2017

Hi Jorg,

Thank you for your response.

I am talking about Author access set up. We have users from two different domains. Each domain has its own LDAP repository. So requirement here is to give access to Author for both domain users who are from two LDAP servers. 

Thanks

joerghoh
Adobe Employee
joerghohAdobe EmployeeAccepted solution
Adobe Employee
April 20, 2017

Hi,

Regarding your 2 LDAP directories: Are there collisions in the usernames, that means that a username appears in directory a AND in directory B? If that's not the case, you can just configure both as recommended by the others; AEM will then query first directory A and in case of a miss directory B.

If this isn't the case and there accounts with the same username in both directory A and B, I don't see any chance to make that work reliably. Because on the AEM side you don't operate with the full full qualified LDAP name, but typically only with the user ID. And if this ID is not unique, you will run into issues.

Jörg

Level 2
April 21, 2017

Thanks Jorg ,Thats really helpful.