CTP Authentication Using LDAP

This article describes how to configure CTP to use an LDAP server to authenticate users. The intended audience for this article is CTP administrators.

The authentication mechanism used by CTP is specified in the Server element in the CTP configuration file (config.xml). This element is described in the top-level CTP article. To configure CTP to use LDAP authentication, several additional attributes are added to the element.

        <Server 
            port="80"
            ssl="no"
            requireAuthentication="no"
            proxyIPAddress=""
            proxyPort=""
            proxyUsername=""
            proxyPassword=""
            usersClassName="org.rsna.server.UsersLdapFileImpl"
            initialContextFactory="com.sun.jndi.ldap.LdapCtxFactory"
            providerURL="org.rsna.server.UsersXmlFileImpl"
            securityAuthentication="simple"
            securityPrincipal="cn=${username}, ou=people, dc=med, dc=university, dc=edu" />

where:

• port, ssl, requireAuthentication, proxyIPAddress, proxyPort, proxyUsername, proxyPassword are described in the article referenced above.
• usersClassName specifies the Java class to be used for authentication of users. To use the LDAP authentication mechanism described in this article, the value shown above must appear in the attribute.
• initialContextFactory specifies the Java class used to link to the LDAP server. The value shown above is the default. Unless there is a specific reason to specify a different class, it is best to omit this attribute.
• providerURL specifies the URL of the LDAP server. It typically begins with ldap:// or ldaps://. This URL will be obtained from the LDAP system administrator.
• securityAuthentication specifies the way the credentials are passed to the server. The default is shown above. Unless there is a reason to use a different valule, it is best to omit this attribute.
• securityPrincipal specifies a string that is processed before being passed to the server when the context is created. For more on this attribute, see below.