This document details how to configure your Jive Messenger installation to use an external LDAP store when authenticating users.
LDAP (Lightweight Directory Access Protocol) has emerged as a dominant standard for user authentication and for storage of user profile data. It serves as a powerful tool for large organizations (or those organizations integrating many applications) to simplify user management issues.
By default, Jive Messenger stores all user data in a database and performs authentication using database lookups. The LDAP module replaces that functionality and allows Jive Messenger to:
This document will guide you through configuring LDAP support in Jive Messenger. These instructions assume that you're a competent LDAP user, and that you're familiar with Jive Messenger setup issues.
In order to configure your server to use LDAP:
Open the configuration file conf/jive-messenger.xml from your Jive Messenger installation in your favorite editor and add or change the following settings:
Below is a sample config file section:
<jive>
...
<ldap>
<host></host>
<port>389</port>
<<usernameField>uid</usernameField>
<nameField>cn</nameField>
<emailField>mail</emailField>
<baseDN>ou=People;dc=example;dc=com</baseDN>
<adminDN>cn=Directory Administrator</adminDN>
<adminPassword></adminPassword>
</ldap>
<provider>
<user>
<className>org.jivesoftware.messenger.ldap.LdapUserProvider</className>
</user>
<auth>
<className>org.jivesoftware.messenger.ldap.LdapAuthProvider</className>
</auth>
</provider>
...
</jive>
Finally, you'll most likely want to change which usernames are authorized to login to the admin console. By default, only the user with username "admin" is allowed to login. However, you may have different users in your LDAP directory that you'd like to be administrators. The list of authorized usernames is controlled via the adminConsole.authorizedUsernames property. For example, to let the usersnames "joe" and "jane" login to the admin console:
<jive>
...
<adminConsole>
...
<authorizedUsernames>joe, jane</authorizedUsernames>
</adminConsole>
...
</jive>