Table of Contents

Search

  1. Preface
  2. Starting Data Archive
  3. System Configuration
  4. Database Users and Privileges
  5. Source Connections
  6. Target Connections
  7. Archive Store Configuration
  8. Datatype Mapping
  9. Database Optimization
  10. SAP Application Retirement
  11. z/OS Source Data Retirement
  12. Seamless Data Access
  13. Data Discovery Portal
  14. Security
  15. LDAP User Authentication
  16. Auditing
  17. Running Jobs from External Applications
  18. Upgrading Oracle History Data
  19. Upgrading PeopleSoft History Data
  20. Data Archive Maintenance
  21. Storage Classifications
  22. Appendix A: Datetime and Numeric Formatting
  23. Appendix B: Data Archive Connectivity

Administrator Guide

Administrator Guide

Sync with LDAP Server Job Parameters

Sync with LDAP Server Job Parameters

When you configure the job parameters for the Sync with LDAP Server job, you specify how Data Archive synchronizes users from the LDAP directory service. You configure the connection properties to connect to the LDAP directory service and filter criteria to determine which users you want to synchronize.
The Sync with LDAP Server job includes the following parameters:
LDAP System
Type of LDAP directory service.
Use one of the following options:
  • Active Directory
  • Sun LDAP
Host of LDAP Server
The IP address or DNS name of the machine that hosts the LDAP directory service.
For example,
ldap.mycompany.com
.
Port of LDAP Server
The port on the machine where the LDAP directory service runs.
For example,
389
.
User
User that logs in to the LDAP directory service. You can use the administrator user. Or, you can use any user that has privileges to access and read all of the LDAP directories and privileges to complete basic filtering.
For example,
corpid@domain.com
.
Password
Password for the user.
Search Base
The search base where the LDAP definition starts before running the filter.
For example,
dc=mycompany,dc=com
User Filter
A simple or complex filter that enables Data Archive to identify individual users in the LDAP security group.
For example, you might use one of the following filters:
  • objectClass=inetOrgPerson
  • objectClass=Person
  • objectClass=*
    where
    *
    indicates that all entries in the LDAP security group should be treated as individual users.
Group Base
Optional. Sets the base entry in the LDAP tree where you can select which groups you want to use to filter users from the user filter.
If you do not specify a group base, then the job synchronizes all users in the LDAP directory service.
For example,
OU=Application Access,OU=Groups,DC=mycompany,DC=com
.
Group Filter
Optional. Determines which groups are selected. After the user filter returns the result set to the application, those users are compared to users in the selected groups only. Then, only true matches are added to Data Archive.
For example,
cn=ILM
.

0 COMMENTS

We’d like to hear from you!