Return to last viewed topic Go to previous topic Go to next topic
Send us documentation feedback Technical support Learning Center Print topic

Active Directory Feature


Active Directory Feature

The Active Directory feature allows you to retrieve user and user group information from the Microsoft Windows Active Directory (AD) into Ektron CMS400.NET. As a result, you can administer user information from one place only, and users need to remember only one password/username combination to sign on to the network and Ektron CMS400.NET.

The Active Directory feature has two implementation modes, described in the following table. Choose the mode that best meets your needs.
Mode
Information Shared between AD and CMS
How to Implement
For more information, see
user authentication only
  • user logon name
  • domain
  • password
On the Active Directory Setup screen, check Enable Active Directory authentication.
active directory integration
  • user logon name
  • domain
  • password
  • user's first and last name
  • email address
  • user groups
  • user's group memberships
On the Active Directory Setup screen, check Enable Active Directory authentication and Enable Active Directory integration.
You may also want to check Enable automatic addition of user from AD and Enable automatic addition of user to groups.


Warning!

To successfully operate Ektron CMS400.NET with Active Directory, the anonymous access user must be running as a domain user account. It cannot be run under a local user account. That domain account can be permission-limited if security is a concern. If anonymous access user is not running as a domain user account, you receive an Automation Error when viewing the Active Directory Setup page.


After Active Directory is installed correctly, you can view the AD Setup page and click edit, but when you try to save the settings, you receive a User Properties Verification error. At that point, you must either set up IIS to run as a domain user or the user properties are invalid. The domain user must have query permission into Active Directory so he can retrieve that information.

After you change the user account under which IIS is running, run Net Stop IISAdmin and Net Start W3SVC from the DOS prompt before trying to save the settings again.



Warning!

Ektron strongly recommends configuring a secure socket layer (SSL), especially if you are using Active Directory Integration. SSL encrypts passwords that are otherwise sent as clear text to the Ektron CMS400.NET server. See SSL Support in the Ektron CMS400.NET Setup Manual for more information.



Send us documentation feedback Technical support Learning Center Print topic Return to last viewed topic Go to previous topic Go to next topic