Home
Administering
Learn how to administer the product.
Administering HCL Compass
Learn how to administer the HCL Compass.
Using LDAP with HCL Compass
Overview of user authentication methods available with HCL Compass.
Setting up LDAP authentication
Overview of LDAP setup procedures.
LDAP configuration steps for HCL Compass
Introduction to basic LDAP configuration commands.
Step 7: Set a user's authentication mode
Set the user's authentication mode for LDAP.

Administering
Learn how to administer the product.
- Administering HCL Compass
  Learn how to administer the HCL Compass.
  - Reconfiguring Compass to use a different JRE
    When you change the Java Runtime Environment (JRE) for HCL Compass, you must reconfigure the product to make it work with the new JRE.
  - Managing databases
    Describes the different types of databases that the administrator can create and manage
  - Managing user accounts
    Use the User Administration tool to set up and administer users and user groups. HCL Compass stores information about users and user groups in the user database and schema repository.
  - Configuring query limits on result sets
    You can configure query limits on the size of result sets to improve system performance, availability, and scalability.
  - Using LDAP with HCL Compass
    Overview of user authentication methods available with HCL Compass.
    - LDAP authentication model
      Description of the LDAP authentication processing model.
    - Before you set up LDAP
      Tasks to be completed as a prerequisite to setting up LDAP authentication, and information about supported LDAP servers and platforms.
    - Setting up LDAP authentication
      Overview of LDAP setup procedures.
      - Collecting LDAP information
        Describes information required and questions to be answered in order to set up LDAP for HCL Compass
      - LDAP configuration steps for HCL Compass
        Introduction to basic LDAP configuration commands.
        Step 1: Set the authentication algorithm to CQ_ONLY
        Authenticating users in a HCL Compass database set.
        Step 2: Set the HCL Compass LDAP connection information
        Step 3: Set the LDAP search criteria
        Step 4: Set the HCL Compass-LDAP mapping criteria
        Use the installutil setcqldapmap subcommand to identify the HCL Compass user profile field and the LDAP user attribute that HCL Compass uses to map a user account in the HCL Compass database set to a user account in the LDAP directory.
        Step 5: Validate the LDAP configuration information
        Step 6: Set the authentication algorithm to CQ_FIRST
        Enable LDAP authentication.
        Step 7: Set a user's authentication mode
        Set the user's authentication mode for LDAP.
        Step 8: Test for LDAP authentication
        Test your database set's LDAP settings.
      - MultiSite considerations
        Factors to keep in mind when setting up LDAP authentication at a site using HCL Compass MultiSite.
      - Disabling LDAP authentication
        Commands to use in disabling LDAP authentication.
      - Common LDAP configurations
        You can configure HCL Compass LDAP authentication in a variety of ways. This topic describes three common configurations and shows examples of the installutil subcommand entries used to achieve the configurations.
      - Enabling SSL Encryption with GSKit
        Overview of SSL encryption and use of a key database to store your digital security certificates.
      - Configuring HCL Compass with LDAP user authentication for TLS 1.2 to support NIST SP 800-131A guidelines
        You must configure LDAP for HCL Compass authentication to support Transport Layer Security 1.2 (TLS 1.2) and NIST SP 800-131A guidelines.
      - TLS 1.0/1.1 ciphers disabled by default for secure LDAP connections
        Several insecure TLS 1.0/1/1 ciphers are now disabled by default in HCL Compass . You will not be able to log in to HCL Compass via LDAP authentication if one of the disabled ciphers are used.
      - Configure FIPS 140-2 approved data encryption
        Compass supports FIPS 140-2 approved data encryption.
      - Quick-reference LDAP worksheet
        Checklist of required information and steps to configure a HCL Compass
    - Syntax
    - GUI changes to support LDAP
      The HCL Compass GUI has been updated to support LDAP authentication.
    - Summary: performing LDAP-related administrative tasks
      Some administrative tasks can be accomplished by using installutil subcommands.
  - Workspace folder permissions overview
    HCL Compass uses a role-based access control (RBAC) model for enforcing workspace folder permissions. The workspace folder permissions feature requires that your schema repository and user databases are at feature level 6 or later.
  - Optimistic and pessimistic record locking
    Overview of optimistic and pessimistic locking implementations in HCL Compass.
  - Configuring Compass core logging and tracing
    This section describes how to configure logging and tracing for Compass core.
- Administering HCL Compass Web
  This section discusses how to administer HCL Compass Web.
- Administering HCL Compass Multisite
  Administering HCL Compass Multisite

Step 7: Set a user's authentication mode

Set the user's authentication mode for LDAP.

About this task

For every user who will use LDAP authentication, you must set the user's authentication mode for LDAP.

Procedure

From the HCL Compass Designer, click File > User Administration.
In the User Administration window, double-click the user entry to open the User Properties window.
In the User Properties window, select the LDAP Authenticated check box.
(Optional) Enter the user's LDAP login name in the LDAP Login field. If a connection to the LDAP server exists, HCL Compass copies the value from the LDAP mapping attribute to the corresponding HCL Compass mapping field. An asterisk (*) next to the field identifies it as the mapping field.
Click OK.

What to do next

To set the authentication mode for multiple users, select the users in the User Administration window; right-click and select LDAP Authenticated or CQ Authenticated. Alternatively, you can use the Perl script SetupCQLDAP.pl.