com.crystaldecisions.sdk.plugin.authentication.ldap
Interface IsecLDAP

All Superinterfaces:

IInfoObject, IsecAttributeBinding, IsecCommitAction, IsecLDAPBase

public interface IsecLDAP
extends IInfoObject, IsecLDAPBase, IsecCommitAction, IsecAttributeBinding

This interface provides the constants necessary to configure and manage LDAP authentication.

The security options for secure socket layer (SSL) are: No SSL, SSL with server authentication, and SSL with mutual authentication.

The first option, No SSL, does not require the use of certificates. Usernames and passwords are sent uninterrupted between SAP BusinessObjects Enterprise and the LDAP server. The second and third options implement SSL server authentication: server authentication configuration, and mutual authentication configuration.

Server authentication requires that the LDAP server is configured to send the client a certificate (server certificate). The client can verify that it trusts the server by authenticating this certificate. Communication is secure because a random certificate is generated by the client for each connection.

Mutual authentication requires both a personal client certificate, and a server certificate. In this situation, both the server and the client need to be authenticated before communication can continue.

The IsecLDAP class can be used with SiteMinder (third-party authentication tool) to create SSO access to SAP BusinessObjects Enterprise. To use LDAP SSO with SiteMinder you must configure the LDAP server, enable SSO authentication, and set the appropriate secLDAP properties. Once configured, SAP BusinessObjects Enterprise will be able to accept SiteMinder tokens and grant SSO privileges.

Nested Class Summary

static interface	IsecLDAP.CeAuthType Specifies the types of authentication for Secure Socket Layer (SSL) server authentication.
static interface	IsecLDAP.CeServerSSLStrength Specifies the types of server-side Secure Socket Layer strength.
static interface	IsecLDAP.CeSSOAccessMode Specifies the single sign-on (SSO) access mode.
static interface	IsecLDAP.CeSSOVendor Specifies the single sign-on (SSO) vendor.

Nested classes/interfaces inherited from interface com.crystaldecisions.sdk.occa.infostore.IInfoObject

IInfoObject.CommitLevel, IInfoObject.Delta, IInfoObject.LocaleOption, IInfoObject.LockStatus, IInfoObject.PropertySet

Nested classes/interfaces inherited from interface com.crystaldecisions.sdk.plugin.authentication.common.IsecCommitAction

IsecCommitAction.CommitActionType

Field Summary

static java.lang.String

CONFIG_FILE_ENTRY This static String CONFIG_FILE_ENTRY is the entry name to the security config setting for sdk The entry must look like the following, do not change anything, com.businessobjects.security.jgss.initiate { com.sun.security.auth.module.Krb5LoginModule required; };

Fields inherited from interface com.crystaldecisions.sdk.plugin.authentication.ldap.IsecLDAPBase

KIND, PROGID, SSL_PROVIDER

Method Summary

Methods inherited from interface com.crystaldecisions.sdk.occa.infostore.IInfoObject

applyDelta, applyDelta, clearTenantID, deleteNow, getCommitLevel, getCUID, getDelta, getDelta, getDescription, getDescription, getDescription, getDescriptionLocales, getFileLocales, getFiles, getFiles, getGUID, getID, getKeyword, getKind, getLockInfo, getOwner, getOwnerID, getParent, getParent, getParentCUID, getParentID, getProcessingInfo, getProgID, getRUID, getSchedulingInfo, getSecurityInfo, getSecurityInfo2, getSourceFiles, getSpecificKind, getSpecificProgID, getTenantID, getTitle, getTitle, getTitle, getTitleLocales, getUpdateTimeStamp, isDirty, isInstance, isLockHeld, isMarkedAsRead, isReadOnly, properties, propertyIDs, releaseLock, removeFiles, removeSourceFiles, retrievePropertySet, save, setCommitLevel, setDescription, setKeyword, setMarkedAsRead, setParentID, setTenantID, setTitle, unlockNow

Methods inherited from interface com.crystaldecisions.sdk.plugin.authentication.ldap.IsecLDAPBase

getAttributeBindingPriority, getAuthType, getAvailability, getBaseDN, getCertificateDBPath, getClientCertificateNickName, getDefaultGroupSearchAttribute, getDefaultRealm, getDefaultUserLicenseRestrictionCUID, getDefaultUserSearchAttribute, getDynamicGroupObjectClass, getGroupDescriptionAttribute, getGroupMemberAttribute, getGroupMemberUrlAttribute, getHostAndPort, getKeyDBPassword, getKeyDBPath, getMappedGroups, getMaxEntriesPerOrQuery, getMaxReferralHops, getObjectClassAttribute, getReferralDN, getServerAdminDN, getServerAuthStrength, getServicePrincipalName, getSSOAccessMode, getSSOAgent, getSSOServersAndPorts, getSSOVendor, getStaticGroupObjectClass, getUserDescriptionAttribute, getUserEmailAttribute, getUserFullNameAttribute, getUserNameAttribute, getUserObjectClass, getUserPrincipalNameAttribute, isAliasAutoAdd, isAttributeBindingEnabled, isCacheSecurityContext, isCreateNamedUsers, isImportUsers, isKerberosEnabled, isSSOEnabled, setAliasAutoAdd, setAttributeBindingEnabled, setAttributeBindingPriority, setAuthType, setAvailability, setBaseDN, setCacheSecurityContext, setCertificateDBPath, setClientCertificateNickName, setCreateNamedUsers, setDefaultGroupSearchAttribute, setDefaultRealm, setDefaultUserLicenseRestrictionCUID, setDefaultUserSearchAttribute, setDynamicGroupObjectClass, setGroupDescriptionAttribute, setGroupMemberAttribute, setGroupMemberUrlAttribute, setHostAndPort, setImportUsers, setKerberosEnabled, setKeyDBPassword, setKeyDBPath, setMappedGroups, setMaxEntriesPerOrQuery, setMaxReferralHops, setObjectClassAttribute, setReferralAdminPassword, setReferralDN, setServerAdminDN, setServerAdminPassword, setServerAuthStrength, setServicePrincipalName, setSSOAccessMode, setSSOAgent, setSSOEnabled, setSSOServersAndPorts, setSSOSharedSecret, setSSOVendor, setStaticGroupObjectClass, setUserDescriptionAttribute, setUserEmailAttribute, setUserFullNameAttribute, setUserNameAttribute, setUserObjectClass, setUserPrincipalNameAttribute

Methods inherited from interface com.crystaldecisions.sdk.plugin.authentication.common.IsecCommitAction

getPluginCommitActionConfig, setPluginCommitAction, setPluginCommitActionConfig

Methods inherited from interface com.crystaldecisions.sdk.plugin.authentication.common.IsecAttributeBinding

getAttributeBindingPriority, isAttributeBindingEnabled, setAttributeBindingEnabled, setAttributeBindingPriority

Field Detail

CONFIG_FILE_ENTRY

static final java.lang.String CONFIG_FILE_ENTRY

This static String CONFIG_FILE_ENTRY is the entry name to the security config setting for sdk The entry must look like the following, do not change anything,
com.businessobjects.security.jgss.initiate { com.sun.security.auth.module.Krb5LoginModule required; };

See Also:

Constant Field Values