topic Re: ArcGIS for Portal- LDAP Configuration in ArcGIS Enterprise Portal Questions

ArcGIS for Portal- LDAP Configuration

krishan_kumarsidh — Sun, 12 Dec 2021 16:25:42 GMT

Hi All,

I am trying to configure ArcGIS For Portal 10.4.1 with LDAP but receiving error-

com.esri.arcgis.portal.admin.core.PortalException: java.lang.Exception: Could not connect to the user store. Please check the configuration and try again.Code: 500

I have provided the json in below format:-

{   "type": "LDAP",   "properties": {     "userPassword": "secret",     "isPasswordEncrypted": "false",     "user": "uid=admin\,ou=system",     "userFullnameAttribute": "cn",     "ldapURLForUsers": "ldap://bar2:10389/ou=users\,ou=ags\,dc=example\,dc=com",     "userEmailAttribute": "mail",     "usernameAttribute": "uid",     "caseSensitive": "false",     "userSearchAttribute": "uid"   } }

Do we have to provided user/userPassword same as Portal Administrator credentials?.
I have replaced ldapURLForUsers with LDAP link provided by my organization administrator.
Thanks in advance.

Re: ArcGIS for Portal- LDAP Configuration

MarkBramer — Mon, 05 Dec 2016 15:21:23 GMT

Hi Krishan,

You mention you changed "ldapURLForUsers". Is that the only property you've changed? You need to also change "userPassword" and "user" at a minimum, and potentially other properties, depending on your LDAP. But first start with user and userPassword.

Mark

Re: ArcGIS for Portal- LDAP Configuration

krishan_kumarsidh — Wed, 07 Dec 2016 10:46:58 GMT

Hi Mark,

Thanks for the quick response.

Actualy I am bit confused with user and userPassword. Is this LDAP admin user/password or any user which is present in LDAP?.

Regards,

Krishan

Re: ArcGIS for Portal- LDAP Configuration

MarkBramer — Wed, 07 Dec 2016 14:24:33 GMT

Sorry, I should have explained better. user and userPassword are credentials for someone to log into LDAP. However, many LDAPs allow anonymous binding (logging in) so you can actually try leaving these two parameters blank and see if you can connect.

Re: ArcGIS for Portal- LDAP Configuration

RajeshKulandaivelu — Thu, 08 Dec 2016 21:02:45 GMT

Hi Krishna,

I have this format configured, see if this suites you.

{ "type": "LDAP", "properties": { "isPasswordEncrypted": "true", "userFullnameAttribute": "cn", "ldapURLForUsers": "ldap://123.abc.com/dc=123,dc=abc,dc=com", "userPassword": "PASSWORD", "caseSensitive": "false", "userSearchAttribute": "cn", "userEmailAttribute": "mail", "user": "CN=USERID,OU=Infrastructure Accounts,OU=Infrastructure Objects,DC=123,DC=abc,DC=com", "usernameAttribute": "sAMAccountName" } }

You will have to replace all the bold letters matching your organization.

Re: ArcGIS for Portal- LDAP Configuration

krishan_kumarsidh — Wed, 28 Dec 2016 07:34:42 GMT

Thanks Rajesh. Will give it a try.

Re: ArcGIS for Portal- LDAP Configuration

krishan_kumarsidh — Wed, 28 Dec 2016 07:37:32 GMT

Thanks Mark. I believe user and userPassword will be of any user having read access to LDAP.

Best Regards,

Krishan

Re: ArcGIS for Portal- LDAP Configuration

MarkBramer — Wed, 28 Dec 2016 14:35:52 GMT

Then you just need to get that user's full distinguished name (DN) and use that for "user" and their password for "userPassword".

And don't forget about trying anonymous (blank for both). This is allowed by many places.

Re: ArcGIS for Portal- LDAP Configuration

JoelConrad1 — Thu, 01 Oct 2020 16:15:51 GMT

4 years later, this was very helpful, Rajesh. This was the last thing I referenced before it started working. Thanks!