...
Table of Contents | ||||||
---|---|---|---|---|---|---|
|
Preparation Tasks
Deploy Syndeia Cloud according to Intercax Documentation.
Read as much of https://ldap.com/learn-about-ldap/ as you need to be fluent in LDAP terms and administration.
Assure that the browsers on the user workstations which are going to interact with Syndeia Web Dashboard and with the chosen DS can connect to both the SP and the DS and that there are no SSL certificate denials.
Assure that there are no traffic shapers on the corporate network that alter HTTP Request and HTTP Response Headers - especially those headers involved in LDAP protocols.
Assure that there are no network routers or proxies on the corporate network that alter HTTP URLs or HTTP Headers.
Obtain the Fully-qualified Network Domain (FQDN) scheme, host, and port of the Syndeia Cloud SP.
Obtain the FQDN scheme, host, and port of the chosen LDAP DS.
Test your assumptions about your organization’s LDAP DS with either
curl
orldapsearch
- Syndeia uses a third-party library for LDAP queries and if external, simple LDAP queries do not work, your configuration of Syndeia based on incorrect assumptions is not going to be successful.
Configure the Directory Store/Server (DS)
...
ssh log into the Syndeia Cloud server with a user that can perform “passwordless sudo” operations. Root access is not necessary if sudo access has been established.
cd to
/opt/icx/syndeia-cloud-current/confs/web-gateway-
<SC_version>-impl/conf
copy all of the following into
silhouette.conf
, adding or replacing any existingldap.
settings.Replace all EXAMPLE values – like
MYCOMPANY.MYCOM:LDAPPORT
– with the values for your organization.
...
Expand | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Operation
Restart the web-gateway service
sudo systemctl restart sc-web-gateway
Open a modern web browser (Chrome, Edge, Safari) and visit
http:SYNDEIA.MYCOMPANY.MYCOM:MYSYNDEIAPORT/login
orhttps:SYNDEIA.MYCOMPANY.MYCOM:MYSECURESYNDEIAPORT/login
In the Login Form dialog, enter the LDAP user credentials for an existing LDAP user that is within the
ldap.baseDN
tree or within theldap.groupSettings.name
LDAP Group (if group-limited LDAP access was configured)Choose LDAP from the Account chooser
Panel | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
If an LDAP user in the proper LDAP scope cannot authenticate into Syndeia, re-confirm with an LDAP search utility that the configuration of Syndeia is correct. Verify this yourself. Usually, either the user is using the wrong user name or wrong password or the LDAP repository has a different tree structure than is assumed. |
...