Skip to main content
System StatusContact Support
VersionOne Community

Continuum LDAP / Active Directory Configuration

 Overview

This article describes the process of setting up Continuum user authentication with LDAP or Active Directory.

Continuum Application Authentication

Continuum supports two forms of user authentication: local authentication or Active Directory / LDAP. In the case of local user authentication the user ids and passwords are stored in the Continuum database (passwords encrypted). When a user request is made to login to Continuum and the user is a local account, the password provided is compared to the password in the Continuum database.

If the user is an LDAP / AD user account, the user id / password provided is submitted using LDAP to the directory service and the determination is made when the account can log in. These LDAP / AD accounts must be predefined in Continuum, but the password is not stored in Continuum or logged in any way.

Point Configuration to LDAP / AD

Login to the Continuum user interface as a user with administrator access. Using the menu on the right, navigate to Administration, Manage Settings. In the top menu, select Settings, then System on the left tab.

There are three settings that will potentially need to be modified: LDAP/AD Port, LDAP/AD Server, LDAP/AD SSL. The Server setting is the only required setting, if Port is not changed then Continuum will use the default ports for LDAP/AD. If SSL is not changed Continuum will not use SSL.

The LDAP/AD Server setting should be the FQDN or IP address of the Active Directory or LDAP service. Click the "+" plus sign on the row of the setting and enter the server address. Do the same for the Port and SSL settings if needed. The SSL setting is a checkbox.

When you are finished with making the changes, click the blue "Save" button in the upper right corner. This settings page DOES NOT auto-save.

You must restart the Continuum user interface web server using the following command:

ctm-restart ctm-ui

Create a Test Account

Login to the Continuum user interface using an administrator account. In the upper right menu, select Administration, Manage Settings. In the top menu select Users.

Create a new user account and fill in the values for Login ID, Full Name and Email Address. The Login Id can be in the following two forms:

userid@domain.example.com

Or

domain\userid

Change Authentication Type to ldap and save the user account.

From the upper right menu, select Log Out. Log back in using the new user account to verify that LDAP / AD authentication is working properly.

Troubleshooting

If there are problems with connecting to LDAP / AD the log in which the specific errors will appear can be found on the Continuum server:

/var/continuum/log/ctm_ui.log

Typical issues consist of wrong LDAP server address, wrong port (default is 389), network connectivity, etc.

  • Was this article helpful?