com.crystaldecisions.sdk.plugin.authentication.ldap
Interface IsecLDAP

All Superinterfaces:

IInfoObject, IsecLDAPBase

public interface IsecLDAP

extends IInfoObject, IsecLDAPBase

This interface provides the constants necessary to configure and manage LDAP authentication.

The security options for secure socket layer (SSL) are: No SSL, SSL with server authentication, and SSL with mutual authentication.

The first option, No SSL, does not require the use of certificates. Usernames and passwords are sent uninterrupted between BusinessObjects Enterprise and the LDAP server. The second and third options implement SSL server authentication: server authentication configuration, and mutual authentication configuration.

Server authentication requires that the LDAP server is configured to send the client a certificate (server certificate). The client can verify that it trusts the server by authenticating this certificate. Communication is secure because a random certificate is generated by the client for each connection.

Mutual authentication requires both a personal client certificate, and a server certificate. In this situation, both the server and the client need to be authenticated before communication can continue. For more information about LDAP and SSL, see the BusinessObjects Enterprise Administrator’s Guide.

The IsecLDAP class can be used with SiteMinder (third-party authentication tool) to create SSO access to BusinessObjects Enterprise. To use LDAP SSO with SiteMinder you must configure the LDAP server, enable SSO authentication, and set the appropriate secLDAP properties. Once configured, BusinessObjects Enterprise will be able to accept SiteMinder tokens and grant SSO privileges. For more information on LDAP SSO authentication with SiteMinder, see BusinessObjects Enterprise Administrator’s Guide.

Nested Class Summary

static interface	IsecLDAP.CeAuthType Specifies the types of authentication for Secure Socket Layer (SSL) server authentication.
static interface	IsecLDAP.CeServerSSLStrength Specifies the types of server-side Secure Socket Layer strength.
static interface	IsecLDAP.CeSSOAccessMode Specifies the single sign-on (SSO) access mode.
static interface	IsecLDAP.CeSSOVendor Specifies the single sign-on (SSO) vendor.

Field Summary

Fields inherited from interface com.crystaldecisions.sdk.plugin.authentication.ldap.IsecLDAPBase

SSL_PROVIDER

Methods inherited from interface com.crystaldecisions.sdk.occa.infostore.IInfoObject

deleteNow, getCUID, getDescription, getFiles, getGUID, getID, getKeyword, getKind, getParent, getParentCUID, getParentID, getProcessingInfo, getProgID, getRUID, getSchedulingInfo, getSecurityInfo, getTitle, isDirty, isInstance, isMarkedAsRead, properties, propertyIDs, save, setDescription, setKeyword, setMarkedAsRead, setParentID, setTitle

Methods inherited from interface com.crystaldecisions.sdk.plugin.authentication.ldap.IsecLDAPBase

getAuthType, getAvailability, getBaseDN, getCertificateDBPath, getClientCertificateNickName, getDefaultGroupSearchAttribute, getDefaultUserSearchAttribute, getDynamicGroupObjectClass, getGroupDescriptionAttribute, getGroupMemberAttribute, getGroupMemberUrlAttribute, getHostAndPort, getKeyDBPassword, getKeyDBPath, getMappedGroups, getMaxEntriesPerOrQuery, getMaxReferralHops, getObjectClassAttribute, getReferralDN, getServerAdminDN, getServerAuthStrength, getSSOAccessMode, getSSOAgent, getSSOServersAndPorts, getSSOVendor, getStaticGroupObjectClass, getUserDescriptionAttribute, getUserNameAttribute, getUserObjectClass, isAliasAutoAdd, isCreateNamedUsers, isImportUsers, isSSOEnabled, setAliasAutoAdd, setAuthType, setAvailability, setBaseDN, setCertificateDBPath, setClientCertificateNickName, setCreateNamedUsers, setDefaultGroupSearchAttribute, setDefaultUserSearchAttribute, setDynamicGroupObjectClass, setGroupDescriptionAttribute, setGroupMemberAttribute, setGroupMemberUrlAttribute, setHostAndPort, setImportUsers, setKeyDBPassword, setKeyDBPath, setMappedGroups, setMaxEntriesPerOrQuery, setMaxReferralHops, setObjectClassAttribute, setReferralAdminPassword, setReferralDN, setServerAdminDN, setServerAdminPassword, setServerAuthStrength, setSSOAccessMode, setSSOAgent, setSSOEnabled, setSSOServersAndPorts, setSSOSharedSecret, setSSOVendor, setStaticGroupObjectClass, setUserDescriptionAttribute, setUserNameAttribute, setUserObjectClass