Configuring User Stores
- Former user (Deleted)
The user management feature allows you to maintain multiple user stores for your system that are used to store the users and their roles. You can set up any of the following types of user stores:
- JDBC user stores
- Active Directory user stores
- Read-Only LDAP user stores
- Read-Write LDAP user stores
The Primary User Store in is configured in the /conf/user-mgt.xml file of each EI profile. By default, the embedded H2 database (JDBC) is configured as the primary user store. You can change the default configuration by replacing the default database according to your requirement. The primary user store is shared among all the tenants in the system.
With the user management feature, any number of Secondary User Stores can be easily set up for your system using the management console. This will automatically create an XML file with the configurations corresponding to the secondary user store. Alternatively, you can manually create the configuration file and store it in this directory without using the management console. Secondary User Stores are specific to the created tenant, and they are not shared between multiple tenants.
Although, information about users and roles are stored in the repositories that we call User Stores, which can be of any of the types described above, the permissions attached to roles are always stored in an RDBMS. According to the default configuration, the embedded H2 database is used for storing permissions as well as users and roles. The instructions in this section explain how you can change the default user store. For information on how to set up an RDBMS repository for storing permission, see Configuring the Authorization Manager.
The following topics include instructions on setting up user stores:
- Configuring the Primary User Store
- Configuring Secondary User Stores
- Working with Properties of User Stores
- Writing a Custom User Store Manager