Administrative Utilities → About User Import → Importing Users and Contacts From LDAP → LDAP Import Settings → LDAP Import - Server Options
Use the Import Options page to select the type of LDAP import you would like to perform, set up a schedule, enter LDAP search settings, and define logging.
For information about options for specific import types, refer to:
Status messages for scheduled imports and updates appear in the Notification Server log file (click Open Log in the Notification Server tab in SBM Configurator to view the messages).
After you have defined one or more LDAP option sets, click Add (+) to launch the scheduler. In the LDAP Scheduling dialog box, select an LDAP Option Set to schedule, enter the desired frequency that it should execute, and then click OK.
To delete an existing schedule, select the schedule, and then click Details or double-click. In the LDAP Scheduling dialog box, click Remove schedule, and then click OK. A summary of the scheduled import or update appears in the Scheduling section.
Save LDAP import option sets so that you can reuse them for scheduled imports and for updating user account and contact data. Server information, user and contact attribute mapping, and template user settings are saved with the import option set.
Select this icon to clear existing search settings and create a new LDAP search option set.
Select this icon to save settings as an LDAP search option set.
Select this icon to delete an LDAP search option set.
Specify the server name, IP address, or fully qualified domain name of the LDAP server. If your directory is replicated on more than one server, list each server's name separated by a space. If a replicated server uses a different port than is specified in the Port box on this dialog box, type :portnumber after the server name.
Specify the port number of the directory server. The default setting for LDAP using clear text is 389; the default LDAP port for Secure Sockets Layer (SSL) is 636. You can specify a different port if necessary for your installation.
Type the Directory root at which searching for user information will begin. All nodes at and beneath the base are searched for records of users being authenticated. The search timeout period is 30 seconds.
(&(objectClass=user)(sAMAccountName={0}))In this case, when user "Joe Smith" attempts to log in, the {0} specifier is replaced by his SBM login ID jsmith and he is authenticated against LDAP. The authentication will succeed if the SBM login ID matches his LDAP sAMAccountName value and he provides the proper password.
Type the distinguished name of an LDAP user account that has permission to search and read other user accounts that are to be authenticated in or imported into SBM. If your LDAP provider allows anonymous searches, this box can be empty. If a DN is provided, however, it must be an active and valid LDAP account located in the same root level directory specified in the Search Base and not in a subordinate container. The DN must be able to search all subordinate containers, so it must be placed in a root level directory that encapsulates the rest of the containers that hold your user accounts.
In the Password box, type the password for the user account specified in the Search DN box. The password is encrypted before it is stored in the SBM database.
This section contains sample data to assist you in mapping LDAP attributes to SBM attributes. Initially, the section does not contain any information. Click Refresh to populate the section with LDAP attributes and sample data from a user in your LDAP store. Click Refresh to see sample data from other users in your LDAP directory.
User accounts are listed based on the order they are stored in the LDAP directory.
Use these options to send a copy of the import log file by e-mail when the import process completes and to send e-mail messages to newly imported users.
The Notification Server must be configured and running to send import logs and new user confirmations. On-premise customers use SBM Configurator to manage the Notification Server. The Notification Server is enabled in on-demand systems.
Change these options as needed:
This check box is selected by default. Clear it to stop the import log from being sent by e-mail.
By default, the user logged into SBM Application Administrator when the import process is started is sent the log message. Change the e-mail address as needed. To send the log to multiple addresses, separate each address with a comma.
Select to disable logging.
Select to log minimal information about LDAP imports and updates, such as the number of users imported and updated.
Select to log detailed information about LDAP imports and exports, including field mapping assignments.
Select to log detailed trace information about LDAP imports and exports, such as the login IDs of the accounts imported or updated. If you are experiencing trouble with this feature, set the logging to Verbose to assist you or Serena support staff in diagnosing problems.
Copyright © 2007–2016 Serena Software, Inc. All rights reserved.