Author: kwright
Date: Sun Mar 31 14:40:40 2013
New Revision: 1462978
URL: http://svn.apache.org/r1462978
Log:
Fix for CONNECTORS-673.
Added:
manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-configure-cache.PNG
(with props)
Modified:
manifoldcf/trunk/CHANGES.txt
manifoldcf/trunk/site/src/documentation/content/xdocs/en_US/end-user-documentation.xml
manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-configure-dc.PNG
manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-status.PNG
Modified: manifoldcf/trunk/CHANGES.txt
URL:
http://svn.apache.org/viewvc/manifoldcf/trunk/CHANGES.txt?rev=1462978&r1=1462977&r2=1462978&view=diff
==============================================================================
--- manifoldcf/trunk/CHANGES.txt (original)
+++ manifoldcf/trunk/CHANGES.txt Sun Mar 31 14:40:40 2013
@@ -3,6 +3,10 @@ $Id$
======================= 1.2-dev =====================
+CONNECTORS-673: Update end-user documentation for the Active
+Directory authority.
+(Karl Wright)
+
CONNECTORS-672: Update end-user documentation to include
Forced Metadata tab.
(Karl Wright)
Modified:
manifoldcf/trunk/site/src/documentation/content/xdocs/en_US/end-user-documentation.xml
URL:
http://svn.apache.org/viewvc/manifoldcf/trunk/site/src/documentation/content/xdocs/en_US/end-user-documentation.xml?rev=1462978&r1=1462977&r2=1462978&view=diff
==============================================================================
---
manifoldcf/trunk/site/src/documentation/content/xdocs/en_US/end-user-documentation.xml
(original)
+++
manifoldcf/trunk/site/src/documentation/content/xdocs/en_US/end-user-documentation.xml
Sun Mar 31 14:40:40 2013
@@ -602,23 +602,26 @@
<title>Active Directory Authority Connection</title>
<p>An active directory authority connection is essential for
enforcing security for documents from Windows shares, Microsoft SharePoint, and
IBM FileNet repositories.
This connection type needs to be provided with
information about how to log into an appropriate Windows domain controller,
with a user that has sufficient privileges to
- be able to look up any user's ID and group
relationships. While the connection type has some known limitations, it should
function well for most straightforward Windows
- security architecture situations. The cases in which
it may not be adequate include:</p>
+ be able to look up any user's ID and group
relationships.</p>
<br/>
- <ul>
- <li>when child domains are present</li>
- <li>when the expected number of requests per second is
fairly high</li>
- </ul>
- <br/>
- <p>An active directory authority connection type has a single
special tab in the authority connection editing screen: the "Domain Controller"
tab:</p>
+ <p>An Active Directory authority connection type has two
special tabs in the authority connection editing screen: "Domain Controller",
and "Cache". The "Domain Controller"
+ tab looks like this:</p>
<br/><br/>
<figure src="images/en_US/ad-configure-dc.PNG" alt="AD
Configuration, Domain Controller tab" width="80%"/>
<br/><br/>
- <p>Fill in the requested values. Note that the
"Administrative user name" field usually requires no domain suffix, but
depending on the details of how the domain
- controller is configured, may sometimes only accept the
"name@domain" format.</p>
- <p>When you are done, click the "Save" button. When you do, a
connection
- summary and status screen will be presented, which
- may look something like this:</p>
+ <p>As you can see, the Active Directory authority allows you
to configure multiple connections to different, but presumably related, domain
controllers. The choice of
+ which domain controller will be accessed is determined
by traversing the list of configured domain controllers from top to bottom, and
finding the first one that
+ matches the domain suffix field specified. Note that a
blank value for the domain suffix will match <strong>all</strong> users.</p>
+ <p>To add a domain controller to the end of the list, fill in
the requested values. Note that the "Administrative user name" field usually
requires no domain suffix, but
+ depending on the details of how the domain controller
is configured, may sometimes only accept the "name@domain" format. When you
have completed your
+ entry, click the "Add to end" button to add the domain
controller rule to the end of the list. Later, when other domain controllers
are present in the list, you can
+ click a different button at an appropriate spot to
insert the domain controller record into the list where you want it to go.</p>
+ <p>The Active Directory authority connection type also has a
"Cache" tab, for managing the caching of individual user responses:</p>
+ <br/><br/>
+ <figure src="images/en_US/ad-configure-cache.PNG" alt="AD
Configuration, Cache tab" width="80%"/>
+ <br/><br/>
+ <p>Here you can control how many individual users will be
cached, and for how long.</p>
+ <p>When you are done, click the "Save" button. When you do, a
connection summary and status screen will be presented, which may look
something like this:</p>
<br/><br/>
<figure src="images/en_US/ad-status.PNG" alt="AD Status"
width="80%"/>
<br/><br/>
Added:
manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-configure-cache.PNG
URL:
http://svn.apache.org/viewvc/manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-configure-cache.PNG?rev=1462978&view=auto
==============================================================================
Binary file - no diff available.
Propchange:
manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-configure-cache.PNG
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Modified:
manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-configure-dc.PNG
URL:
http://svn.apache.org/viewvc/manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-configure-dc.PNG?rev=1462978&r1=1462977&r2=1462978&view=diff
==============================================================================
Binary files - no diff available.
Modified:
manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-status.PNG
URL:
http://svn.apache.org/viewvc/manifoldcf/trunk/site/src/documentation/resources/images/en_US/ad-status.PNG?rev=1462978&r1=1462977&r2=1462978&view=diff
==============================================================================
Binary files - no diff available.
