Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How does Tridion CME pick specific AD-LDAP from a domain containing many AD-LDAP?

  1. Implementation has AD. The SDL Tridion CMS MMC console DOES NOT have any AD-LDAP integration (no sync or anything). Just a plain vanilla install.
  2. This means users are created in AD, then manually added in CMS and given rights/access in CME.
  3. When we add a user we just provide the Domain name in the GUI and the CMS goes and fetches all the users. Now we do not provide any configuration or reference to any AD-LDAP server anywhere for above setup.
  4. If a domain “My_Domain” has 20 AD servers then how does Tridion knows which AD to pick for this new user (part of “My_Domain”) to be added? OR if an existing user logs in then how does Tridion knows which AD server to go for look up (if there are 20 AD-LDAP servers a particular domain may have)?
like image 646
Vinod Bhagat Avatar asked Feb 22 '23 01:02

Vinod Bhagat


1 Answers

OK, we can forget LDAP for now, since you didn't configure it. Tridion will use standard Windows authentication over NTLM/Kerberos.

The answer is that Tridion doesn't know or cares which server to use. This task is delegated to IIS, which in turn will use whatever server the Windows OS tells it to.

You're probably better off asking this question to a Windows Server group, and forgetting the Tridion part of it. When using Windows authentication Tridion will just rely on standard IIS to deal with it.

like image 131
Nuno Linhares Avatar answered Apr 27 '23 14:04

Nuno Linhares