Configuring LDAP
Configure the connection between QMetry and your LDAP or Active Directory server so that QMetry can authenticate and import LDAP users.
Configuring LDAP Settings
To configure LDAP settings, perform the following steps:
Go to System Settings.
Select LDAP/SAML.
In the Choose Integration System list, select LDAP.
Enter the following details:
Field
Description
Host
Specify the LDAP server URL using one of the following formats:
ldap://<IPAddress>:389
ldaps://<IPAddress>:<Port> (for secure LDAP over SSL/TLS)
Base DN
Specify the Base Distinguished Name (DN) from which LDAP searches begin.
Example 63.dc=qmetry,dc=com
Bind DN
Specify the distinguished name (DN) of the user account used to connect to the LDAP server and import users. Leave this field blank if your LDAP server supports anonymous searches.
Example 64.cn=example,cn=users,dc=example,dc=com
Password
Specify the password for the Bind DN account. Leave this field blank if anonymous searches are enabled.
Data Attribute
Specify the LDAP attribute that stores the QMetry login name.
First Name Attribute
Specify the LDAP attribute that stores the user's first name. If left blank, the value from the Data Attribute is used.
Last Name Attribute
Specify the LDAP attribute that stores the user's last name. If left blank, the value from the Data Attribute is used.
Email Attribute
Specify the LDAP attribute that stores the user's email address. If left blank, the value from the Data Attribute is used.
Sample User Name to Authenticate
(Optional) Specify the username (for example, an email address) of an LDAP user to verify the LDAP server connection after configuration.
Sample User's Password
(Optional) Specify the password for the sample LDAP user. This field is required only if a sample username is provided.
Active
Select whether to enable the LDAP configuration.
Available values:
Yes – Enables LDAP authentication.
No – Disables LDAP authentication.
Note
If your LDAP server supports anonymous searches, you can leave the Bind DN and Password fields blank.
If the LDAP administrator changes the Bind DN account credentials, update the corresponding credentials in QMetry. Otherwise, LDAP users will not be able to sign in.
Ensure that the password for the Bind DN account does not expire automatically. If it changes or expires, update the password in the LDAP configuration to maintain uninterrupted authentication.
Default Access Type: In case of LDAP users, Default Access Type is configured from Integration > LDAP. While importing users through LDAP, the Default Access Type will be assigned based on this settings.
Sample Settings Parameters
Active Directory Details (on Windows) | LDAP Directory Details (on Linux) |
Host: | Host:
|
Base DN: | Base DN: |
Bind DN: | BindDN: |
Data Attribute: | Password: Data Attribute: Sample User: Sample User Password: |
Test or Save
Test: It authenticates the user whose password is provided in the Password field and who tries to import the user(s) from the LDAP Server. Click the Test button to verify the connection with the server. A message window pops up.
Save: Click the Save button to store the LDAP details in the database. A message window pops up.
The Authentication Type for the user is set from Users in Customization.
Default Projects are assigned from Project under Project Management.
Default Roles are assigned from Roles in Customization >.
Note
LDAP users can log in without an organization code for on-premise installations.