How to import users as VISULOX PORTAL administrators

The VISULOX PORTAL Service knows an important role: administrator.
Users in this role can use the VISULOX Portal Console of the VISULOX PORTAL Service.
A user can be assigned to the role with the VISULOX Portal Console or with the command line, 
but only if there is an ENS profile in the datastore for this user.
This is normally not the case for users authenticated via LDAP. 
To assign LDAP users to the administrator role, a LDAP mirror profile has to be configured in the datastore.


VISULOX provides a service to automatically create the LDAP mirror in the datastore: alignRole
This article explains how to configure VISULOX for automatic assignment of the VISULOX PORTAL Console to a specific group of users.
Users who are found with searchadmin in the datasources are created for  VISULOX PORTAL administrators.
In this example it is:

CODE

-searchadmin '(&(objectClass=person)
                (memberOf=CN=PORTALADMIN,OU=Groups,OU=ToolBox,DC=tbsol,DC=de)
                (|(distinguishedName=%SEARCH_STRING%)
                  (cn=%SEARCH_STRING%)
                  (givenName=%SEARCH_STRING%)
                  (uid=%SEARCH_STRING%)
                  (mail=%SEARCH_STRING%)
                  (sAMAccountName=%SEARCH_STRING%)
                )
              )'

Configuration

searchadmin is configured with a datasource object within VISULOX (See: How to work with VISULOX datasources).

The searchadmin string should be checked. This parameter holds the search string for admin group.

CODE

visulox datasource list -name tbsol -info
 
Datasources
    ----------------------------------------------------------------------------------------------------------------------
    |    name |         parameter |                                                                                value |
    ----------------------------------------------------------------------------------------------------------------------
    | tbsol,0 |          location |                                                                            Stuttgart |
    | tbsol,0 |              host |                                                                   office-ad.tbsol.de |
    | tbsol,0 |              type |                                                                                 ldap |
    | tbsol,0 |          username |                                                   CN=Logon,OU=ToolBox,DC=tbsol,DC=de |
    | tbsol,0 |              port |                                                                                  389 |
    | tbsol,0 |          password |                                                                             <hidden> |
    | tbsol,0 |        attributes |                     objectclass dn mail uid cn surname mobile memberOf c countryCode |
    | tbsol,0 |              base |                                                            OU=ToolBox,DC=tbsol,DC=de |
    | tbsol,0 |          disabled |                                                                                false |
    | tbsol,0 |           mapping |                                                                                 MSAD |
    | tbsol,0 |       searchadmin | (&(objectClass=person)(memberOf=CN=Admins,OU=Applikation,OU=ToolBox,DC=tbsol,DC=de)) |
    | tbsol,0 | searchapplication                                                                                        |
    | tbsol,0 |       searchgroup |                                                                  (objectclass=group) |
    | tbsol,0 |        searchuser |                                                                 (objectclass=person) |
    | tbsol,0 |        vlx_source |                                                                                vB1LX |
    ----------------------------------------------------------------------------------------------------------------------

List of users in the admin group

CODE

/opt/visulox/lib/utils/ldap.tcl -source TESTAD -objectclass admin

Test commands

VISULOX PORTAL command to list the admins

CODE

visulox-portal role list_members --role global

Configuration

Test commands

Related articles