Manage Users in LDAP Installations
There are two methods of configuration for LDAP. The first is a full LDAP and the second one is the LDAP authentication only (Hybrid). The full LDAP allows for complete management of the users to be handled by editing the user’s LDAP profile and group membership. The second method, LDAP authentication only (Hybrid), manages the users within the Admin console.
In a full LDAP installation, user properties and roles are managed by the LDAP server. Therefore, when you assign a domain user an Calyx RIM Viewing role, the user credentials including name, e-mail, and role, are automatically supplied to Calyx RIM Viewing. You edit or remove users from their Calyx RIM Viewing roles by editing their LDAP profile, as opposed to using Calyx RIM Viewing user-management features.
The roles on your LDAP directory are mapped to the Calyx RIM Viewing roles in the ldap-map.xml file, which is configured during installation.
The Reviewer, Publisher, Submission Manager, Restricted Reviewer, or Administrator role for each user is determined by the LDAP role you provide. However, access to groups is managed from within the Administrator interface for both LDAP and Non-LDAP installations.
After users initially log on to Calyx RIM Viewing, they appear in the list of users on the Security page.