Skip to content

Integration with LDAP

Lorenzo Natali edited this page Jun 20, 2019 · 2 revisions

The purpose of this guide is explain how to configure MapStore to allow users to login using LDAP credentials and setup maps permissions based on LDAP user groups.

General

Configuring MapStore to use LDAP means to synchronize it's back-end users database with LDAP.

MapStore back-end is also known as GeoStore. To configure LDAP with GeoStore you can follow the Wiki page editing a file called geostore-spring-security.xml.

TL;DR

The easier way to configure it in mapstore is to follow the instructions linked above for GeoStore editing the geostore-spring-security.xml file inside the final war.

All the following considerations regard the possibility to set-up LDAP configruation in a custom project and externalizing your secrets credentials.

Override configuration

MapStore uses the maven-war-plugin to include GeoStore as back-end. This means that it merges all the resources coming from the geostore.war with the files generated by it's pom (as configured in src/pom.xml), included geostore-spring-security.xml.

To overwrite the spring security file you have to simply to save your new geostore-spring-security.xml in web/src/resources. The final mapstore.war will contain your new file instead of the geostore's default one.