Direct Use of LDAP Authentication
|
|
The metadata server
validates some users against an LDAP provider such as Active Directory.
Direct LDAP enables the metadata server to recognize accounts that
aren't known to its host; direct LDAP doesn't modify the host's behavior.
|
|
|
-
Primarily used for connections
to the metadata server.
-
Can also be used for direct connections
from a data provider to the OLAP server.
|
|
|
Enables users to use
their Windows accounts to authenticate to a metadata server that runs
on UNIX.
|
|
|
-
Not an alternative to storing user
IDs in the metadata (that requirement applies to all configurations).
-
Not supported for workspace servers
or stored process servers.
-
Might involve appending a special
qualifier to user IDs that are stored in the metadata.
|
|
|
|
The following figure contrasts back-end use and direct
use.
