TRUECHART Knowledge Base Live Search

Search

Page tree

trueChart Help

Skip to end of metadata
Go to start of metadata

Apart from the manual (local) creation and management of users, the TRUECHART Service can be linked to an existing LDAP service (such as OpenLDAP, Active Directory, eDirectory, etc.) to control access to users already existing in your directory.

NOTE: For users running trueChart prior to v2021.2.0 , this screen will be found under "Settings". Further functionality remains the same

Connect to an LDAP server

Follow these steps to connect the TRUECHART service to your directory via LDAP:

  1. Open the TRUECHART Management Console and go to the Settings page
  2. Select the User Directories menu entry on the left
  3. Click on Add Directory in the upper right.
  4. In the New LDAP Connector dialog enter the following information:
    1. Name and Domain name of the LDAP server
    2. Host and Port the LDAP service is listening on
    3. Username and Password to authenticate to the LDAP service
    4. Sync interval and Search timeout
  5. Check to connection by clicking on button Test Connection
  6. Click on "Test connection", then Save changes by clicking on button Save

Connect to an LDAPS server

For using a secure connection to the LDAP server you need to follow the steps for connection to a LDAP server, except some adjustments:

Host: The Hostname must contain the protocol. So for a LDAPS connection the host must contain something like "LDAPS://ldap-host.com". The important thing is that it starts with "LDAPS://"

Port: Needs to be changed to the SSL port of the LDAP server . 636 (default - may differ)

In the LDAP(S) auth the checkbox for SSL must be checked and DC must have certificate also .

Edit the config

To edit the config of an already created LDAP directory connection follow these steps:

  1. Open the TRUECHART Management Console and go to the Settings page
  2. Select the User Directories menu entry on the left
  3. Select the directory configuration to edit in the center


Advanced settings

Server settings

Here the general access parameters must be specified.

PropertyDescription
NameThe name of the current directory setting
DomainThe domain name to be sync with
Host

The hostname or IP address to access

This should be your Domain Controller

Port

Enter 389

This is the default port. Enter this value unless you have some custom configuration for LDAP.

UsernameUsername to be used for access
PasswordThe password for given username to be used for access
Sync interval (in minutes)Sync interval is the time period (in minutes) the TRUECHART Service syncs the users and groups between the directory and itself. The default value is 60 minutes.
Search timeout (in seconds)Specify the timeout for search operation within the directory The default value is 60 seconds.

LDAP schema

Here the access names to the base directory and special user or user groups are specified.

PropertyDescription
Base DN

Base DN is the distinguished name of the directory.

Example: dc=TRUECHART,dc=de,dc=com

User DN (optional)

Optional value to give for user domain names.

The given OU "OU=TRUECHARTUsers" is the actual OU in the Active Directory that you chose to put your users in. Please note that this OU does not have to called "TRUECHARTUsers". It can be called anything you want or any OU that has the users you want to be in your TRUECHART Server instance. Please confirm the group is an OU and not a CN. If CN, you can use the designator CN=Users for example.

Group DN (optional)

Optional value to give for group domain names.

The given OU "OU=TRUECHARTUserGroups" is the actual OU in the Active Directory that you chose to put your users from groups in. Please note that this OU does not have to called "TRUECHARTUsersGroups". It can be called anything you want or any OU that has the users you want to be in your TRUECHART Server instance. Please confirm the group is an OU and not a CN. If CN, you can use the designator CN=Users for example.

User schema

In the following section, the TRUECHART Service attributes must be mapped from directory values to TRUECHART Service values for the users to be imported.

PropertyDescription
User objectExample: user
User object filterExample: (&(objectCategory=Person)(sAMAccountName=*))
Attribute: UsernameExample: sAMAccountName
Attribute: Username RDNExample: cn
Attribute: First nameExample: givenName
Attribute: Last nameExample: sn
Attribute: Display nameExample: displayname
Attribute: Principle nameExample: userPrincipleName
Attribute: EmailExample: mail
Attribute: Unique user IDExample: objectGUID
Attribute: User groupsExample: memberOf

Group schema

In the following section, the TRUECHART Service attributes must be mapped from directory values to TRUECHART Service values for the user groups to be imported.

PropertyDescription
Group objectExample: group
Group object filterExample: (&(objectCategory=Group)(name=*))
Attribute: Unique group IDExample: objectGUID
Attribute: Group nameExample: cn
Attribute: Group descriptionExample: description
Attribute: Group membersExample: member
Fetch group members recursivelyChecked/Uncheck to do so, also import users within sub or nested groups