Active Directory
Active Directory provides an LDAP interface to its data. Using this interface Plone
can use both users and groups from an Active Directory system. Writing to Active
Directory is not supported.
With Active Directory you can use two different properties as login name:
userPrincipalName and sAMAccountName. sAMAccountName is the plain account name without
any domain information and is only unique within a single domain. If your environment
only uses a single AD domain this option is the best choice. For environments with
multiple names the userPrincipalName attribute can be used since this includes both
account name and domain information.
Since Plone does not support binary user ids it is not possible to use the objectGUID
attribute as user ids. Instead you can use either sAMAccountName or userPrincipalName.
The same criteria for choosing a login name also apply to selecting the user id
attribute.
Standard LDAP
LDAP directory servers are fully supported. LDAP users and groups are usable as
standard Plone users and groups can be me managed normally. Creating and deleting users
and groups is supported.
|