LDAP Plugin

...

The Sonar LDAP Plugin enables the delegation of Sonar authentication and authorization to an external system. The plugin currently supports LDAP and Microsoft Active Directory.

...

1. Install the LDAP plugin through the Update Center or download it into the SONAR_HOME/extensions/plugins directory
2. Restart the Sonar server
3. Make sure that at least one user with global administration role exists in Sonar as well as in the external system

4. Configure the LDAP plugin by editing the conf/sonar.properties file (see below)

5. Restart the Sonar server and check the log file for:

   INFO org.sonar.INFO Security realm: LDAP
   ...

   INFO o.s.p.l.LdapContextFactory Test LDAP connection: OK

6. Log into Sonar

(&(objectClass=inetOrgPerson)(uid={login}))

(&(objectClass=user)(sAMAccountName={login}))

(&(objectClass=groupOfUniqueNames)(uniqueMember={dn}))

(&(objectClass=group)(member={dn}))

# LDAP configuration
sonar.security.realm=LDAP
sonar.security.savePassword=true

ldap.url=ldap://myserver.mycompany.com
 
ldap.user.baseDn=ou=Users,dc=mycompany,dc=com
ldap.user.objectClass=inetOrgPerson
ldap.user.loginAttribute=uid
ldap.user.realNameAttribute=cn
ldap.user.emailAttribute=mail


ldap.group.baseDn=ou=Groups,dc=sonarsource,dc=com
ldap.group.request=(&(objectClass=posixGroup)(memberUid={uid}))

...

1. Determine DNS Domain Name:
   • from "ldap.realm" property if set
   • from FQDN of machine, where Sonar is installed (eg. if FQDN is "sonar.example.org", then DNS Domain Name will be "example.org")
2. Determine URL of LDAP server:
   • from "ldap.url" property if set

   • from DNS server ( see known limitations ), here is example of SRV Record for domain "example.org":

     No Format
     _ldap._tcp.example.org. 72784 IN SRV 0 5 389 ldap.example.org.

     for this domain URL of LDAP server will be "ldap://ldap.example.org:389"

3. Determining BaseDN:
   • from "ldap.baseDn" property if set
   • from DNS Domain Name (eg. if DNS Domain Name is "example.org", then BaseDN will be "dc=example,dc=org")

...

...

...

...

...