Versions Compared

Old Version 2

changes.mady.by.user Chad Kienle

Saved on

compared with

New Version 3

changes.mady.by.user Chad Kienle

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

conf/com.cirruslink.chariot.server.auth.ldap.config

Example ldap (OpenDJ) LDAP configuration:

No Format
idAttributeusernameAttributeName="uid"
subTopicAttributeName="cls-subTopicFilter"
pubTopicAttributeName="cls-pubTopicFilter"
credentialObjectClassName="cls-mqttCredential"
baseDn="dc=cirruslink,dc=com"
url="ldap://localhost:389"
username="cn=chariot"
password="123456"
aclCheckInterval="10000"

Example Microsoft Active Directory configuration:

No Format
usernameAttributeName="sAMAccountName"
subTopicAttributeName="clsSubTopicFilter"
pubTopicAttributeName="clsPubTopicFilter"
credentialObjectClassName="clsMqttCredential"
baseDn="CN=Users,DC=chariot,DC=io"
url="ldap://chariot-testing.chariot.io:389"
sysUserDn="cnCN=Administrator,CN=Users,DC=chariot,DC=io"
sysPassword="*******"
aclCheckInterval=I"12345610000"

LDAP auth configuration properties:

PropertyRequiredDefaultDescription
idAttributeusernameAttributeNameyes
The attribute of an entry that represents the username of the MQTT client to authenticate
subTopicAttributeNameyes
The multivalued attribute of an entry that represents a subscription topic filters 
pubTopicAttributeNameyes
The multivalued attribute of an entry that represents a publish topic filters 
credentialObjectClassNameyes
The ObjectClass of an entry that holds the credentials
urlyes
The URL of the LDAP server
sysUserDnusernameyes
The distinguished name (DN) that Chariot uses to authenticate with the LDAP server 
sysPasswordpasswordyes
The password that Chariot uses to authenticate with the LDAP server
baseDnyes
The base distinguished name (DN) where entries used for ACLs will be searched for
aclCheckIntervalyes
The interval (in ms) between ACL updates


Additionally the Chariot MQTT server must be configured to use the LDAP authentication instead of the internal MQTT Credentials.  This can be done by manually editing the following configuration file:

...