You can use the ESF LDAP security administration Web interface to configure LDAP for use with your Enterprise Server installation. This alternative browser-based interface enables you to administer the LDAP information outside of the MFDS user interface. It enables you to display and administer large numbers of users, groups and resources.
Note: The user used to login to the Web interface requires Update, Add, Delete access from the User Administration resource. This resource can be found under the Enterprise Server Administration resource class in LDAP.
Features
The ESF LDAP security administration Web interface has the following features:
- Browser based graphical display of the users, groups, resource classes, and resource entities that are defined in a configured LDAP-compatible security manager such as Microsoft Active Directory, AD LDS or OpenLDAP.
- Ability to easily sort and filter users, groups, classes, and resources.
- Enhanced experience independent of the MFDS user interface enabling segregation of the LDAP security manager administration role from the Enterprise Server configuration and operational role.
- Takes advantage of the new ESF LISTREFERENCES feature to enable easy determination of relationships among security objects and rules.
Limitations
The ESF LDAP security administration Web interface has the following limitations:
- Support for nested groups is not provided within the interface. If required, you can administer nested groups from the esfadmin command-line utility.
- Actions taken in the interface are applied to all the security managers in the security manager list. Therefore,
Micro Focus recommends you only have one security manager in the security manager list. You can administer multiple different security managers by defining separate Enterprise Server regions to host the ESF LDAP security administration Web interface for each security manager required.
