Como Integrar AD o LDAP Con La Ume Del Portal
Como Integrar AD o LDAP Con La Ume Del Portal
Applies to:
SAP Enterprise Portal (04&04s). For more information, visit the Portal and Collaboration Homepage For more information, visit the Portal and Collaboration homepage.
Summary
This article gives the step-by-step information about integration of Active Directory with Portal UME Author: Rudradev Devulapalli
Author Bio
Rudradev Devulapalli is an Enterprise Portal Consultant at Satyam Computer Services Ltd.
How to Integrate Active Directory or LDAP with UME of SAP Enterprise Portal
Table of Contents
Objective .............................................................................................................................................................3 Prerequisites ...................................................................................................................................................3
Procedure ....................................................................................................................................................................3 Active Directory Configuration......................................................................................................................................3 UME LDAP Configuration Tool ....................................................................................................................................3 Entering the Connection Data for the LDAP Server .....................................................................................................4
How to Integrate Active Directory or LDAP with UME of SAP Enterprise Portal
Objective
This document covers the steps involved in configuring Active Directory as data source for the SAP Enterprise Portal. It discusses configuration steps that need to be done on Active directory and Enterprise Portal for achieving the Active Directory as UME for Portal.
Prerequisites
Installed a SAP Web Application Server Java where the UME is configured to use the database of the J2EE Engine as data source. The LDAP directory has a hierarchy of users and groups that is supported by UME. The administrator of the LDAP directory must create a user that UME can use to connect to the LDAP server. This user should have read and search permissions for all branches of the LDAP directory. Procedure Active Directory Configuration Create service user EPSRVCUSER pwd: xxxxxxxx o Select User cannot change password o Select Password never expires Configure the service user o Select Use DES encryption types for this account o Set Service Principal Name (SPN) setspn -A HTTP/server.domain.org EPSRVCUSER Check service user configuration Export LDAP attributes ldifde r (samaccountname=EPSRVCUSER) f out.ldf Check userPrincipalName Check servicePrincipalName
UME LDAP Configuration Tool Start the Configuration Tool by executing <SAPJ2EEEngine_installation>\j2ee\configtool\configtool.bat.
How to Integrate Active Directory or LDAP with UME of SAP Enterprise Portal
In the LDAP configuration tool under Data Source Configuration file, choose Browse and browse to the new configuration file - dataSourceConfiguration_ads_readonly_db_with_krb5.xml
Choose Upload. The configuration file is uploaded and you can now choose it from the list of configuration files. Entering the Connection Data for the LDAP Server Start the Configuration Tool by executing <SAPJ2EEEngine_installation>\j2ee\configtool\configtool.bat. In the Configuration Tool, choose UME LDAP data. Enter the connection details for your LDAP data source as follows.
How to Integrate Active Directory or LDAP with UME of SAP Enterprise Portal
LDAP Server Type Server Name Server Port User Password SSL UME unique id with unique LDAP attribute User Path Group Path
MICROSOFT ADS Predefined <SERVER> <SYS.ID > Service User* Password of the Service User* Not Selected Samaccountname
CN=Users,DC=<SAP>,DC=org CN=Users,DC=<SAP>,DC=org
*Service User and Password is created in LDAP. It is used to connect (bind) to the LDAP directory server. The user which was created in the process of integrating windows file share in to SAP KM can be used for this purpose. To test the data you entered: Choose Test connection to establish a connection with the user ID and password you entered.
Choose Test authentication to establish a connection with a user ID and password that you provide in a dialog box.
Choose Apply Changes to save changes. Restart the java application server.
How to Integrate Active Directory or LDAP with UME of SAP Enterprise Portal
Related Content
https://weblogs.sdn.sap.com/pub/wlg/5714 https://weblogs.sdn.sap.com/pub/wlg/3522 http://help.sap.com/saphelp_nw04s/helpdata/en/42/d5bea337ed3308e10000000a1553f7/frameset.htm For more information, visit the Portal and Collaboration homepage.
How to Integrate Active Directory or LDAP with UME of SAP Enterprise Portal