Configuring LDAP connection

Configure the connection to the LDAP server so that the software can interact with the LDAP directory.

You can set up to four server instances, for example, by using config1,, config2, config3 and config4. The example below uses config1.

  1. Log in to IRIS Focus as root.
  2. To enable and configure LDAP, go to the file /etc/vaisala/radarsw/webapp/application.yaml.
  3. To enable LDAP, set ldap.enabled to true.
  4. To enable SSL with LDAP, set ldap.ssl to true.

    Without SSL, keep the setting at false.

  5. Set the IRIS Focus admin credentials in ldap.local-admin.username and ldap.local-admin.password.

    For this purpose, you must create a new LDAP admin user. To do this, log into IRIS Focus as admin and create a new user with the “Administrator” role.

    These credentials are needed for setting the correct roles when authenticating users from LDAP.

  6. Set up at least one LDAP server instance. Start by setting ldap.config1.enabled to true.
  7. Type the credentials for connecting to LDAP server in ldap.config1.system.username and ldap.config1.system.password.
  8. Set ldap.config1.search.base to match your LDAP directory structure.
  9. After making changes to the application.yaml file, restart the IRIS Focus WebApp to register the changes: 
    systemctl restart vaisala-radarsw-webapp
  10. To allow IRIS Focus to add LDAP users to the database, make sure that the IRIS Focus password rules are the same as the LDAP password rules. This enables the LDAP passwords to be automatically permitted by IRIS Focus.