1,126
edits
m (Clarified the need for ARS_TRUSTED_SSO_HOSTS when configuring CMOD for Single Sign On.) |
(Updated cmod version information for arsLsync ldap sync.) |
||
| Line 369: | Line 369: | ||
: Specifies the field to use for the IBM CMOD group name. | : Specifies the field to use for the IBM CMOD group name. | ||
;ARS_LDAP_IGN_USERIDS | ;ARS_LDAP_IGN_USERIDS | ||
: '''''Only available in CMOD v10.1.0.3 and CMOD v10.5 and higher!''''' | |||
: Populate with a list of CMOD User IDs that are exempt from LDAP authentication, who will be authenticated by the password stored in the local OnDemand database. | : Populate with a list of CMOD User IDs that are exempt from LDAP authentication, who will be authenticated by the password stored in the local OnDemand database. | ||
: It's a very good idea to include CMOD administrators in this list, so they can still log in when your organization's LDAP server is down. | : It's a very good idea to include CMOD administrators in this list, so they can still log in when your organization's LDAP server is down. | ||
: If you have separate UserIDs for loading ("ARSLOAD") and maintenance ("ARSMAINT") it's a terrific idea to add them to this list of CMOD User ID's, so that normal production processing can continue, in the event of an LDAP server failure. | : If you have separate UserIDs for loading ("ARSLOAD") and maintenance ("ARSMAINT") it's a terrific idea to add them to this list of CMOD User ID's, so that normal production processing can continue, in the event of an LDAP server failure. | ||
;ARS_LDAP_IGN_GROUPS | ;ARS_LDAP_IGN_GROUPS | ||
: '''''Only available in CMOD v10.1.0.3 and CMOD v10.5 and higher!''''' | |||
: Populate with a list of CMOD User IDs that are exempt from LDAP authentication, who will be authenticated by the password stored in the local OnDemand database. | : Populate with a list of CMOD User IDs that are exempt from LDAP authentication, who will be authenticated by the password stored in the local OnDemand database. | ||
: Specifies the CMOD group identifiers that CMOD will ignore when syncing. | : Specifies the CMOD group identifiers that CMOD will ignore when syncing. | ||