Active Directory Accelerator Guide

Back Next

Debugging the Active Directory Accelerator

Debug the Active Directory accelerator.

Navigate to the following directory:

<Dynamic Data Masking installation>/Accelerators/ActiveDirectory/cfg

Find the sample_ldap.properties file and save the file as ldap.properties in the following directory:

<Dynamic Data Masking installation>/custom/cfg

Edit the following properties in the ldap.properties file:

hostname: The host name or IP address of the LDAP directory.
port: The LDAP port. Default is 389.
authentication: The LDAP authentication. The authentication can be simple or none.
basedn: The domain name in the LDAP directory format. For example, if the domain name is mycompany.com, enter the following text:
basedn=DC\=mycompany,DC\=com
principal: The user name that connects to the LDAP directory followed by @<domain name>, such as jsmith@mycompany.com. Required if you configure the authentication to be simple.
rootpwd: The password of the user that connects to the LDAP directory. Required if you configure the authentication to be simple.
PRINT_TO_OUTPUT: Enter enabled.
LDAP_ACTUAL_USER: Enter the LDAP user that you want to check.
ATTR_NAME: Enter the attribute name that you want to check.
ATTR_VALUES: Enter the attribute values that you want to check, separated by a vertical bar (|).
Groups: Enter the groups that you want to check, separated by a vertical bar (|).

Save the file in the custom/cfg directory as ldap.properties.

Find the ldap.bat file for Windows or the ldap file for Linux and UNIX. You can find the file in the following location:

<Dynamic Data Masking installation>/Accelerators/ActiveDirectory/lib

Copy the ldap.bat file or the ldap file to the Dynamic Data Masking installation directory.

In a command prompt, navigate to the Dynamic Data Masking installation directory.

Run the following command in the command prompt:

On Windows run the following command:

ldap.bat > myOutput.out

On Linux and UNIX, run the following command:

ldap > myOutput.out

A myOutput.out file appears in the installation directory with output messages for the LDAP matcher.

Save the myOutput.out file.

Open the ldap.properties file and comment-out the Groups property. Enter a pound sign (#) before the Groups property.

Save the ldap.properties file and run the following command in the command prompt:

On Windows run the following command:

ldap.bat > myOutput.out

On Linux and UNIX, run the following command:

ldap > myOutput.out

A myOutput.out file appears in the lib directory with output messages for the attribute value matcher.