Configuring ES

After you have successfully configured your LDAP server for ES, you can configure ES to use LDAP for security. This is discussed in more detail elsewhere. Here is a short overview:

• To use an LDAP server for ES external security, you need to create a Security Manager object in MFDS. The security manager will use these options:
  • Module will be mldap_esm.
  • Connection Path should be the hostname and port of your LDAP server, just as you supplied it on the es-ldap-setup command line. You can leave it blank if you're using a local ADAM (or AD) server.
  • If you want ES to use an LDAP user account other than MFReader, supply an Authorized ID and Password. The format of Authorized ID depends on your LDAP server and some optional settings of the mldap_esm module, but usually it will be either an LDAP DN (e.g. CN=MFReader,CN=ADAM Users,CN=Micro Focus,CN=Program Data,DC=local) or a Windows username with domain (eg mydomain\MFReader).
  • If you are using an application partition other than the default (CN=Micro Focus,CN=Program Data,DC=local), you will need to provide it in the Configuration Information text area, in this manner:

    [LDAP]
    Base=CN=Micro Focus,CN=Program Data,DC=local

• Once the security manager has been created, you can enable it for a specific ES server, for all ES servers that don't have a specific security configuration, and/or for MFDS. It's best not to configure it for MFDS until you have tried it with an ES server, though, or you may find it difficult to sign on to MFDS in order to fix your configuration.
  • To enable your security manager for a specific ES server, edit that server in MFDS. Select Server in the top row of tabs, Properties in the second row, and Security in the third. Uncheck the option "Use default ES Security Manager configuration" and apply the change. An "Add" button should appear in the Security Manager List area at the bottom of the form. Click it and add your security manager.
  • To enable your security manager for all ES servers that don't have a specific security configuration, edit the default ES security manager configuration in MFDS, and add your manager.
  • To enable your security manager for MFDS, edit the MFDS security configuration and add your manager. If your manager is already set up as the default ES security manager, you can also select the option to use the default ES configuration as the MFDS security configuration.