Setting up mixed-mode authentication

Applies to: On premises

Use mixed-mode authentication when not all users can use a single namespace for authentication.

This solution should be used by customers who do not want to create the OPSystem, SOXAdministrator, OpenPagesAdministrator, or OPAdministrator user accounts on their LDAP server but do want all their users to be authenticated by LDAP. The following procedure creates a new namespace and modifies user names (such as OPSystem) to authenticate against the OpenPages® authentication module rather than LDAP.

Procedure

  1. To create the namespace modules in the aurora_auth.config file, log on to the application server.
  2. Find and open the aurora_auth.config file.
  3. Create or update the namespace modules in the file as follows: 
    OpenpagesDefault
{
com.openpages.aurora.service.security.namespace.AuroraLoginModule
required debug=false;
};


Openpages
{
com.openpages.aurora.service.security.namespace.LDAPLoginModule required 
debug=false 
provider.url="ldap://192.168.0.169:30429" 
security.authentication="simple"
base.dn="DC=LDAPTesting,DC=local;OU=People,DC=LDAPTesting,DC=local"
user.attr.id="uid"
;
};
  4. To create the namespace in the database, log on to the database instance with the database id, such as OPENPAGES.
  5. Run the following SQL to create the OpenpagesDefault namespace: 
    insert into namespaces (NAMESPACEID, NAME, JAASLOGINMODULE,
DESCRIPTION) values (namespaceidseq.nextval, 'Openpages Security',
'OpenpagesDefault', 'Default Openpages Security Namespace');
  6. Run the following SQL to point an ID to the new namespace: 
    update actors set namespaceid = (select namespaceid from 
namespaces where JAASLOGINMODULE = 'OpenpagesDefault') where actorid = 
(select actorid from actorinfo where name = 'user_name');
    For example, the following SQL will have the OPSystem use the OpenpagesDefault namespace for authentication:
    update actors set namespaceid = (select namespaceid from
namespaces where JAASLOGINMODULE = 'OpenpagesDefault') where actorid =
(select actorid from actorinfo where name = 'OPSystem');
  7. Commit the changes to the database.