When you configure the job parameters for the Sync with LDAP Server job, you specify how Data Archive synchronizes users from the LDAP directory service. You configure the connection properties to connect to the LDAP directory service and filter criteria to determine which users you want to synchronize.
The Sync with LDAP Server job includes the following parameters:
LDAP System
Type of LDAP directory service.
Use one of the following options:
Active Directory
Sun LDAP
Host of LDAP Server
The IP address or DNS name of the machine that hosts the LDAP directory service.
For example,
ldap.mycompany.com
.
Port of LDAP Server
The port on the machine where the LDAP directory service runs.
For example,
389
.
User
User that logs in to the LDAP directory service. You can use the administrator user. Or, you can use any user that has privileges to access and read all of the LDAP directories and privileges to complete basic filtering.
For example,
corpid@domain.com
.
Password
Password for the user.
Search Base
The search base where the LDAP definition starts before running the filter.
For example,
dc=mycompany,dc=com
User Filter
A simple or complex filter that enables Data Archive to identify individual users in the LDAP security group.
For example, you might use one of the following filters:
objectClass=inetOrgPerson
objectClass=Person
objectClass=*
where
*
indicates that all entries in the LDAP security group should be treated as individual users.
Group Base
Optional. Sets the base entry in the LDAP tree where you can select which groups you want to use to filter users from the user filter.
If you do not specify a group base, then the job synchronizes all users in the LDAP directory service.
Optional. Determines which groups are selected. After the user filter returns the result set to the application, those users are compared to users in the selected groups only. Then, only true matches are added to Data Archive.