Authentication and user accounts

User accounts in Bedework are maintained either

in the Apache DS ldap directory shipped with the Bedework Quickstart, or
in your local enterprise directory.

You can perform authentication against either the Apache DS directory, your local directory, CAS, Shibboleth, or other service. If you plan on using a local service for authentication, please see Setting up authentication.

If you plan on using the Apache DS directory shipped with the quickstart, the information below explains how to add and edit user accounts in that system.

Default quickstart users

The quickstart ships with a number of default users and a super user named "admin". The default user names and passwords are found on the Quickstart Jump Page, http://localhost:8080/bedework , next to each application (or by looking in the quickstart Apache DS directory itself). You can modify, add, and remove users from the Apache DS directory using the information below.

Using the Apache DS ldap directory shipped with the Bedework Quickstart

To add user accounts to the Apache DS ldap directory:

sign into the jmx-console (e.g. http://localhost:8080/jmx-console/ )
click "org.bedework" in the left-most menu
click service=Selfreg
you should see the following form at the top of the table of Operations:
add a user by filling in the fields and clicking "Invoke". For example:

If you plan to use Apache DS in production, secure it!

Before you move into production, you should change the LDAP password for the admin user. Please see "Securing Bedework".

Accessing the Apache DS LDAP Server

With Apache DS running, you can connect to the Apache DS server with any LDAP client using the following settings (password = "secret"):

PASSWORD: secret