topic Re: Set default app for LDAP users in Security

Set default app for LDAP users

plaxos — Fri, 22 Jan 2016 17:18:37 GMT

How can users who are LDAP authenticated and authorized (i.e. LDAP group mapped to a role) be given a default app?

It is not possible to associate a default app with a role in authorize.conf. A default app can be set in user-prefs.conf as default_namespace, but this appears to be a per user based preference that is stored in the etc/user/xxx directories (which anyway do not exist for LDAP users until they logon for the first time).

I have tried configuring it at the app level using an apps/myapp/local/user-prefs.conf but this does not seem to have any effect.

BTW ... this is all done for a Search Head Cluster so has to be done with conf files and a deployer.

Re: Set default app for LDAP users

somesoni2 — Fri, 22 Jan 2016 22:19:48 GMT

You can store the the role level default app in etc/apps/local/user-prefs.conf as

[role_user]
default_namespace = YourApp

Re: Set default app for LDAP users

plaxos — Mon, 25 Jan 2016 16:57:09 GMT

You are right. Thanks for the pointer.
Now I have to decide whether to distribute this via deployer, and overwrite the system defaults (bad practice), or manually make the change on each SHC member.