Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section


Column
width50%


Panel
borderColor#CCCCCC
bgColor#FFFFFF
titleBGColor#F0F0F0
borderStylesolid
titleOn the page:

Table of Contents



Column



Configuring LDAP

To configure the LDAP catalog, do the followingTo connect to an LDAP catalog:

  1. In the LDAP catalogs group, click Create

  2. ...
  3. .

    Image Modified
    An LDAP 1 object is added in the system. On the right, a panel displays configuration settings for the LDAP 1 catalog.
  4. Enter
  5. In the Name field, enter a name for the catalog
  6. in the appropriate field (1)
  7. .
    Image Modified
  8. Enter the address of the LDAP catalog server (2) and port (3)
  9. In the Server name or IP address field, enter the address of the LDAP catalog Server.
  10. In the Port field, enter the connection port of the LDAP catalog Server.
  11. In the Base DN field, enter the Distinguished Name of the branch, from which

  12. to start search (4)
  13. the data search starts.

    Note
    titleAttention!
    • If LDAP users are located in multiple directories with a
  14. tree-like
    • hierarchical structure, you cannot
  15. establish instant synchronization across
    • synchronize all users at the same time.
    • To synchronize each user group within a DN branch, you
  16. have to
    • must specify the path to the corresponding directory.
      For example, LDAP contains a directory Employees
  17. including subdirectories
    • and subdirectories Managers, Cashiers and Salesmen
  18. .
    • :
      • DN branches for synchronizing users
  19. within
      • within Managers directory: ou=Managers,ou=Employees,dc=example,dc=com.
      • DN branches for synchronizing users
  20. within
      • within Cashiers directory: ou=Cashiers,ou=Employees,dc=example,dc=com.
      • DN branches for synchronizing users
  21. within
      • within Salesmen directory: ou=Salesmen,ou=Employees,dc=example,dc=com.
  22. Enter
  23. In the User field, enter the name of a user who has
  24. write
  25. a read access to the base DN, in
  26. LDAP format
  27. LDAP (RDN + DN)
  28. with password (5).If encryption (SSL) is required for connecting to the LDAP server, select the corresponding check box (6)
  29. format.
  30. In the Password field, enter user password.
  31. Set the Use secure connection (SSL) checkbox if you want to use secure connection (SSL) when connecting to the LDAP catalog.
  32. In the Search filter field, enter a string for filtering catalog entries

  33. (7)
  34. .

    Note
    titleAttention!

    To upload users by groups, not by

  35. directories
  36. catalogs, you

  37. should
  38. must use the

  39. Member Of
  40. MemberOf filter attribute. For example:

    (&(objectClass=user)(memberof=CN=YourGroup,OU=Users,DC=YourDomain,DC=com).

  41. In the Username attribute field, enter the

  42. field
  43. attribute, from which the

  44. user's login
  45. username is obtained

  46. (8)
  47. .

    Info
    titleNote

    To search for users by the sAMAccountName attribute

  48. sAMAccountName
  49. , you must enter

  50. their names in small letters –
  51. the attribute in lowercase letters—samaccountname.

  52. In the DN attribute field, enter the

  53. field
  54. attribute, from which the user's DN is obtained

  55. (9)
  56. .

    Info
    titleNote
  57. To set a login and DN attribute, you
  58. You can use Microsoft Active Directory and OpenLDAP LDAP templates in the LDAP templates

  59. . To use a template, click the relevant link (10).Specify a default user role for users created via LDAP (11). If no role is specified, no automatic user creation will be possible for this catalog
  60. parameter to specify the username and DN attribute.

  61. In the Role for automatic registration of user field, enter a role, to which new users of the LDAP catalog are automatically added. If you don't specify a role, automatic user creation for this catalog is disabled.
  62. Сlick the Apply Image Added button.

The LDAP catalog is now added to the system.

To test the connection, click the Test connection button. If connection is successful, the form on in the lower part of the screen displays information about the catalog users.
Image Added
Otherwise, an error message appears.

Copying the LDAP catalog

To copy a catalog with all settings, do the following:

  1. Click the name of the catalog that you want to copy.
  2. Click the Create button.

A new catalog with identical settings is created. The default name of the new catalog is LDAP 1, LDAP 2, and so on, depending on the number of previously created catalogs.

Removing the LDAP catalog

To remove a catalog, do the following:

  1. Click the name of the catalog that you want to remove.
  2. Click the Remove Image Added button.

The selected catalog is removed.Image Removed