Versions Compared

Old Version 4

changes.mady.by.user Igor Shakhbazyan

Saved on

compared with

New Version 5

changes.mady.by.user Igor Shakhbazyan

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

FieldDescription
NameSpecify the definition name. The name you enter here becomes a target in the Import Sources record.
ActiveSelect this checkbox to activate the LDAP definition and to allow importing data.
RDNEnter the relative distinguished name (RDN) of the subdirectory to search through. 
ServerSpecify the LDAP server containing the users and groups directory and other information related to LDAP. This server must be preliminarily configured in System LDAP → LDAP Servers.
Table

Select the target table that perceives the data from your LDAP server. For users, select the

User

Users (sys_user) table, and for groups, select the Group (sys_group) table.

The target table specifying is used for LDAP auto-provisioning (automatic creation of users in the Users (sys_user) table). This feature can be enabled or disabled by setting the proper value for the user.ldap_autoprovision property (for more information about this property, please refer to the Available System Properties article).

Filter

Enter a filter string to select specific records to import from the OU (organizational unit). 

For example, this filter specifies the excerpt, as shown below:

  • Classified as a person,
  • Have an sn attribute value,
  • Are not computers,
  • Are not flagged as inactive,
  • And login prerequisites are not equal to 'admin@itglobaladmin@simpleone.comru'.

(&(objectClass=person)(sn=*)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(userPrincipalName=*.admin@itglobaladmin@simpleone.comru)))

For more information about LDAP filter syntax, please refer to appropriate RFC.

Query field

Specify the attribute name within the LDAP server for querying the records.

ActiveDirectory, mostly, uses the sAMAccountName attribute. Other LDAP servers tend to use the cn attribute.

...