eTraxis supports LDAP, so Active Directory users can log in eTraxis using their domain credentials. Besides that eTraxis has its own accounts database. All eTraxis accounts are separated into two classes − administrators and users. Administrators can manage accounts, projects, templates and so on. Users can only work with records. Active Directory users have users permissions by default. You can also give administrators rights to specified Active Directory users via LDAP_ADMINS option of '/src/engine/config.php' file (see 'LDAP Authentication' chapter for details).

Please note, that enabling LDAP support does not block eTraxis accounts, so you can use both sets of accounts simultaneously. When LDAP support is enabled all eTraxis user names are extended with '@eTraxis' suffix to avoid conflicts between user names.

When user is trying to log in, eTraxis looks for entered user name in its own accounts database. If user is not found then user name is being looked for on LDAP server. Thus, Active Directory user will not be able to log in if eTraxis user with the same name already exists. In this case Active Directory user should add '@' character at the end of his name (e.g. "artem@" instead of "artem") − it will skip searching in eTraxis accounts database, and entered user name will be looked for on LDAP server only.

Groups

Global groups are system-wide and accessible in any project registered in eTraxis. To manage global groups go to 'Groups' in top level menu.

Membership management dialog contain two main controls − 'Others' at left and 'Members' at right. 'Members' control contains current list of users of this group. To remove user (or several ones) select his name (or several names) and click '←' button. To add new users to the group select their names in 'Others' control and click '→' button. If you turned off (set to '0') LDAP_ENUMERATION option of '/src/engine/config.php' file (see 'LDAP Authentication' chapter for details), then you have to type in 'Others' control names of users to be added. If you are entering several user names please either put each name on separated line, or separate names with comma. eTraxis will add to group all the users it has found; all unknown user names will be put back to 'Others' control for your review. Please note that eTraxis looks for specified users in its own database and then, if not found, on LDAP server.

Last update: 2009-07-30