EmpowerID's Virtual Directory Service (VDS) provides a robust identity virtualization service with unified, enterprise-wide security by acting as an abstraction layer between disparate data stores, such as payroll systems, HR systems, Active Directory, custom applications and other sources. EmpowerID's VDS allows applications to interact with these data sources, without being directly connected to them.
In this topic, we use the terms "Virtual Directory Service", "VDS", and "LDAP Server" interchangeably.
Installing and configuring the EmpowerID Virtual Directory Server on Linux involves the following:
Creating a SQL Login on the EmpowerID database for the VDS (see prerequisite information)
Extracting the LDAPServer.X.X.X.tar.gz file.
Making the installer executable.
Executing the installer.
Configuring the LDAP Server for your environment.
Adding the SQL password, PFX certificate and passphrase to the LDAP Server.
Starting the LDAP Server service.
SQL Login Prerequisite: As the LDAP Server authenticates users against the EmpowerID database, you need to provide it with a SQL login that has rights to the EmpowerID database. Expand the below drop-down for step-by-step directions on creating the login in SQL Server.
To create a SQL Login
Open SQL Server Management Studio.
From Object Explorer, create a Login and set the Default database to the instance of the EmpowerID database in your environment. Note that SQL Serve authentication is used.
From the Login Properties dialog, set the User Mapping to EmpowerID Service and public.
To verify the login, open a new instance of the Connect to Server dialog, select SQL Server Authentication and enter the credentials you just created.
To install the EmpowerID Virtual Directory Server
Run the following command to extract the LDAPServer.X.X.X.tar.gz file you received from EmpowerID.
tar -xzf Downloads/LDAPServer.22.214.171.124.tar.gz
Please note that the location of the file on your server as well as the name of the file may differ. Update the command for your specific scenario accordingly.
Optional: Run the following commands to navigate to the folder with the LDAP Server install script and view the README file.
To navigate to the folder with the install script
cd LDAP\ Server/linuxInstallScripts
To view the README
Run the following command to make the installer executable:
sudo chmod +x install.sh
Run the following command to execute the installer. When executed, the installer checks to see if you have node and forever installed—installing them if you do not—and then installs the EmpowerID LDAP Server.
To configure the LDAP Server for your environment
After installing the EmpowerID LDAP Server, run the following command to open theconfig.txtfile. The file needs to be edited for your environment. In the command, we are using gedit, but you can use another editor if preferred. To do so, replace "gedit" with your editor.