Skip to main content

Configuring LDAP authentication

You can use pre-designated, fixed accountenrollment names and passwords to enroll devices in MDM,accounts or you can use your existingan LDAP (directory, such as Active Directory, eDirectory, or Open Directory)Directory, databasefor asMDM enrollment authentication. This setup edits /usr/local/filewave/apache/conf/mdm_auth.conf on the credentialsFileWave forServer, enrollment.so Toself-managed setcustomers need server shell access. Hosted FileWave customers should work with FileWave Technical Support because they do not have direct server file access. Complete this up, you will edit a configuration file on your FileWave server. This can be done at any time during your server setup; as long as it is complete before you begin enrolling MDM clients.
ThisThe process consistshas of:three parts:

    1. BackingBack up the current config file;
    2. EditingEdit a new config file toso properlyit can read the LDAP structure; and,and
    3. RestartingRestart the Apache Processprocess so it reads the new config file.

Getting the files ready

  • Open a Terminal Windowwindow or use SSH to get intoaccess the computer running FileWave Server
  • Gain root credentials
sudo -s
  • Enter your login password
  • Navigate to the FileWave Apache configurations folder:
cd /usr/local/filewave/apache/conf/
  • BackupBack up your current mdm_auth.conf by making a copy
cp mdm_auth.conf mdm_auth.conf.bac
  • Make a copy of the LDAP example and rename it
cp mdm_auth.conf.example_ldap_auth mdm_auth.conf
  • MakingMake the changes
  • Open mdm_auth.conf up usingin your preferred text editoreditor, (such as nano mdm_auth.conf or vi mdm_auth.conf). Make the appropriate changes (theThe sample file is appropriatelycommented; commented)update andit for your LDAP structure, then save the .conf file.

YouIf canyou also useedit the Finderfile outside the server shell, copy it back to locate/usr/local/filewave/apache/conf/mdm_auth.conf with the file,correct thenfilename dragbefore arestarting copy to your Desktop and edit it with a text editor, such as TextWrangler.Apache.

When done, you will delete the copy in the .../conf/ folder and replace it with your edited copy.)
Note: Active Directory (AD) by defaultnormally requires youa bind toaccount before FileWave can read the directory to read.directory. Many peopleorganizations create a read-only directory account.account for this purpose.

  • Once saved, restart the FileWave Apache process/service:
/usr/local/filewave/apache/bin/apachectl graceful

Now, when a user attempts to enroll a device in your MDM server, hethey or she willcan use their LDAP credentials to authenticate.

Related Content

Back to top