Nexus LDAP Integration

LDAP integration (Active Directory)

1)  Login into admin console -> Administration -> Server -> Security Settings
Security should be ON
Move all the Realms from Available Realms to Selected Realms and make sure OSS LDAP Authentication Realm is on the top of the list

Selected Realms
OSS LDAP Authentication Realm
Xml Authenticating Realm
Xml Authorizing Realm

Save the changes

2)  Navigate to Security -> LDAP configuration
Protocol: ldap
Hostname: ldap server name or ip address
Port: 3268 or 389
Search Base: DC=mydomain,DC=com
Authentication Method: Simple Authentication
Username: Specify full DN of ldap bind ID
e.g. CN=myldapbindid,OU=My Service Accounts,OU=something,DC=mydomain,DC=com
Password: ldap-bind-id-password

Check Authentication to validate the connection

User Element Mapping.

Base DN: OU=something1, OU=something2
User Subtree: unchecked
Object Class: user

User ID Attribute: sAMAccountName
Real Name Attribute: displayname
E-Mail Attribute: mail

In my case, the users authenticating are under OU=something1, OU=something2,DC=mydomain,DC=com ldap group i.e., CN=ldapuser+Base DN+Search Base.

Group Element Mapping: Unchecked

Save the settings and check user mapping. If the values are correct, a subset of ldap records will be displayed at the bottom of the same screen.

3) Assigning Users
Navigate to Security -> Users -> Choose LDAP from dropdown -> Type ldapuserid in the search field.

The user should be successfully retrieved from your ldap.
Role management -> Add -> Nexus Administrator
Choose your desired role.

4) Login with your LDAP account and validate.