User Management Guide

Contents

About This Book

PART I    Directory Management

1   About Pluggable Realms

About realms
Types of realms
Realm access
J2EE application server realms
exteNd Application Server realm
exteNd application server compatibility realm
BEA WebLogic realm
IBM WebSphere realm
LDAP server realms
Base LDAP realm
LDAP application server realms
PersistManager realm
Writing a custom realm
Configuring realms
Configuring realms automatically
Configuring realms manually
Configuring a different authentication provider
Configuring the primary realm
Configuring a custom realm

2   Managing Users and Groups

About the Directory subsystem
Directory API
Authenticating users
About the Login portlet
Authenticating a user
Adding users and groups
Adding a user
Adding a group
Adding a user to a group
Accessing users, groups, and containers
User and group queries
Dynamic groups support
Getting container principals in a tree realm

3   Using the Directory Section of the DAC

About the Directory section of the DAC
Search facility
Users
Groups

PART II    Security Management

4   Using ACL-Based Authorization

About the Security subsystem
ACLs in exteNd Director
Accessing principals
How ACL processing works
ACL subsystem administrators
Restricting access to administrators using the API
Accessing ACLs for users and groups
Getting Security API delegates
Getting an element type and identifier
Listing the permissions associated with an element
Listing the principals with permission for an element
Listing the elements with permissions for a principal
Getting the content of an ACL
Assigning a principal to an ACL
Accessing ACLs for containers
Assigning a container principal to an ACL
Customizing ACL-based authorization
Customizing the Security service
Adding ACL-based security to a new subsystem
Custom permissions

5   Using Security Roles

About J2EE role-based authorization
About exteNd Director security roles
Creating a security role
Mapping a security role to a workflow process
Mapping a security role to a portal page layout
Accessing security roles programmatically

6   Using the Security Section of the DAC

Modifying administrative access

PART III    User Profiling

7   Managing User Profiles

About user profiles
How profiles are used
Profiles and realm configurations
Checking the realm configuration
Checking for a writable realm
About the New User portlet
Accessing profiles using the API
Creating a new profile
Looking up user profiles
Getting a user profile
Rules and user profiling
About conditions and actions

8   Accessing User Attributes

About attributes
Built-in attributes
Attributes and non-LDAP realms
Attributes and LDAP realms
Attribute properties
Display properties
Data types
Accessing attributes using the API
Getting a list of attributes (non-LDAP)
Getting a list of attributes (LDAP)
Creating an attribute (non-LDAP)
Setting an attribute value

9   Using the Profiles Section of the DAC

About the Profiles section of the DAC
User profiles
Attributes

PART IV    Reference

10   Framework Tag Library

addUserToGroup
createGroup
createUser
getGroupList
getResource
getUserID
getUserInfo
getUserList
getUserPreference
login
logoff
removeGroup
removeUserFromGroup
setUserPassword
userInGroup
userLoggedIn


Copyright © 2004 Novell, Inc. All rights reserved. Copyright © 1997, 1998, 1999, 2000, 2001, 2002, 2003 SilverStream Software, LLC. All rights reserved.  more ...