To configure the user authentication via the MS Active Directory Service: 

1. Login into MS Windows as Administrator 

2. Export LDAP context to the file.

ldifde –f ldap.txt

3. Open the result ldap.txt file. The first line of the file should be

dn: DC=ldap-server,DC=my-company,DC=com

4. Enable LDAP in trackstudio.ldap.properties

trackstudio.useLDAP yes

5. Set base DN to cn=users in specified DN

ldap.baseDN = cn=users,dc=ldap-server,dc=my-company,dc=com

6. Set the user which will be used to login to the server.

ldap.userDN = cn=Administrator,cn=users,dc=ldap-server,dc=my-company,dc=com

7. To login by Name set

ldap.loginAttrLDAP=displayName
ldap.loginAttrTS name

To login by Login set

ldap.loginAttrTS login
ldap.loginAttrLDAP=sAMAccountName

8. Set the password. 

9. Click the Test Connection button to test the LDAP connection.

If trackstudio.useLDAP is set to yes, TrackStudio will connect to the specified LDAP server during login and performs authentication using the login and password specified in ldap.userDN and ldap.userDNpass. TrackStudio then performs DB query and finds the user in the local DB by specified login and password. After that TrackStudio searches in the LDAP server for the user, the ldap.loginAttrLDAP parameter which is equal to the name or the login (depending on ldap.loginAttrTS value) of the found user. Then the authentication of the found user is performed using the password specified in the login window.

• You should always use your TrackStudio login in the Login window.
• Even if you use LDAP authorization, you will have to register a new user in TrackStudio first.
• When you change the password under the Change Password tab, the password will chang in the database, but not the LDAP.
• A user can log in if his/her password matches the one stored in the DB or the one specified in LDAP. To avoid authorization via the local database, you should remove gran.app.adapter.auth.SimpleAuthAdapter from the pipeline in the trackstudio.adapter.properties file.

• Using LDIFDE to Import and Export Directory Objects to Active Directory