LDAP Configuration for Portal, ABAP (EHP4 Implementation)

[Former Member]

Hello Experts,

We are trying to use the JAVA Stack of ECC server for HR Portal and have applied EHP4 package for ESS/MSS.It is a 64 bit server and we need to configure LDAP.When we are trying to configure the LDAP ADS datasource through portal , we are not able to do it since ABAP datasorce file is available by default.We need to use LDAP as datasource ,can you suggest how we can configure LDAP now since all Portal users and groups are maintained in LDAP ?

Also, suggest the best practice and options we can use.

Thanks and Regards,

Rakesh Verma

[former_member66264 · Accepted solution]

Its still possible to use LDAP for the portal, but indirect via the ABAP system:

So this should still be possible:

LDAP <-> ABAP <-> J2EE

the master help is here:

http://help.sap.com/erp2005_ehp_04/helpdata/EN/e6/0bfa3823e5d841e10000000a11402f/frameset.htm

The rest should speak for itself.

Let me know if you need more help.

Regards

Nico

[former_member432219]

Hi Rakesh,

if the application server is a dual stack i.e ABAP + JAVA, then unfortunately you cannot change from ABAP UME datasource to LDAP.

Please see note 718383. Only with a Web AS Java (no ABAP) can you configure the UME to use LDAP UME persistence

[Former Member]

Hi Whitty,

Thanks for the information. Actually have we already checked the mentioned sap note and other details available in forums. Since the users uses the portal login credentials which are maintained in AD server, we need to configure LDAP .What can be the possible ways in which we can do this in dual stack ?

Is it possible to configure the ABAP UME to AD LDAP and assure the user's credentials to be same in portal as it is stored in AD ?

What are the various solutions possible ?

Thanks and Regards,

Rakesh Verma

[former_member432219]

Is it for the purposes of authentication that you want to use the LDAP as the UME datasource, or is for access to the object data stored in the Active Directory?

If your intention is to use windows integrated authentication then you can configure kerberos authentication with an ABAP UME datasource - see this blog

/people/holger.bruchelt/blog/2008/03/10/configuring-spnego-with-abap-datasource

and the official documentation on the SAP help portal

Otherwise maybe the LDAP connector would be of use

http://help.sap.com/saphelp_nw70ehp2/helpdata/en/48/74040175bb501ae10000000a42189b/frameset.htm

[Former Member]

Hi Patrick/Nico ,

Thanks for the helpful information.This we are doing for HR(ESS/MSS) Portal.This is for access to the object data stored in the Active Directory.What should now be the best practice to follow for configuration ? Should we go for separate Portal server or is it possible to use Java Stack of ECC server for configuration.

As suggested by Nico, in LDAP <-> ABAP <-> J2EE scenario please suggest if it a best practice and we can follow the same .What are the limitations , risks and issues ? Please suggest if this has been implemented and running well in any live project .

Are the suggestions applicable for load balanced servers as well?

Thnaks and Regards,

Rakesh Verma