Any NiagaraAX platform (JACE, Supervisor) running AX-3.8 or later is compatible with any of the user services in the ldap module, providing that the ldap module is installed.

If using either AX-3.8 LDAPv3-compatible user service (LdapV3UserService or LdapV3ADUserService), the NiagaraAX host platform must be licensed with the feature “ldapv3”. A sample license line is below.

<feature name="ldapv3" expiration="never" kerberos="true" parts="LDAPV3_PART"/>

Kerberos authentication requires the attribute kerberos=”true”, as shown above. Note also that Kerberos is not supported on any “J9 Java VM” (JACE-2/4/5 series) platform.

Note the LDAPv2-compatible user services (LdapUserService, ActiveDirectoryService), also available in AX-3.7, do not require host licensing. These are effectively the same LDAP user services provided since NiagaraAX-3.1. However, note that these user services do not offer Kerberos as an authentication choice.