Configuring Groupwise for eDirectory
This assumes you have a basic Groupwise installation already. Installation of Groupwise is not hard though.
Step 1: Log in to the Administration Interface.
Section titled “Step 1: Log in to the Administration Interface.”Real simple, Just log in to the GW Administration interface as the admin user. The interface is at port 9710.
Step 2: Add the eDirectory server to the system
Section titled “Step 2: Add the eDirectory server to the system”- Go to System } LDAP Servers } New Directory
- Give it a name like eDirectory
- Fill in the FQDN (if DNS) and click the “Use SSL button”
- For the SSL Certificate, upload the cert you downloaded from the Identity Console
- Enter the username in LDAP format (
cn=admin,o={YOUR ORG}) and enter the admin password from earlier. - Under Base dn enter the organizational unit part (
o={YOUR ORG}) - Choose your domain under Sync Domain and enable syncronization.
- Press the Test Connection button, it should work
- Navigate to the LDAP Authentication tab, and entier the username in LDAP format and the password
- Click OK
Step 3: Add the LDAP server to the system
Section titled “Step 3: Add the LDAP server to the system”- In the same LDAP Server menu, click the New LDAP server option
- Give it a name
- Choose the Directory you just created as the Directory
- Add the same host name and port and ssl certificate as before.
- Navigate to the Post offices tab
- Move your PostOffice from Avaliable to Selected
- Click Ok
- Close out of the menu
Step 4: Import Users
Section titled “Step 4: Import Users”This is where you link or create your users based on the LDAP tree.
- Navigate to System } User Import
- Choose your Post Office
- Leave the context empty
- Leave the LDAP filter empty
- Select Search Sub Tree
- Click Preview
- You should have users to import, Click “Import Users”
- Under Users you should now be able to see your LDAP users with an association under a users General Tab
Step 5: Switch Authentication in your Post Office
Section titled “Step 5: Switch Authentication in your Post Office”- Open your Post Office
- Go to the Security Tab
- Select LDAP authentication instead of Groupwise Authentication
- Select the LDAP server and move it from avaliable to selected
- Log into Groupwise and give it a test!