NOTE: If you use a default project template, the Synchronization Editor sets up the domains in the One Identity Manager database. If necessary, domains can also be created in the Manager.
To create an LDAP domain
In the Manager, select the LDAP > Domains category.
Click 
On the main data form, edit the main data for the domain.
To edit the main data of an LDAP domain
In the Manager, select the LDAP > Domains category.
Select the domain in the result list.
Select the Change main data task.
Edit the domain's main data.
Enter the following data on the General tab.
|
Property |
Description | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
Domain |
NetBIOS domain name. | |||||||||
|
Full domain name |
Name of the domain confirming to DNS syntax. Name of this domain.name of parent domain.name of default domain Example Docu.Testlab.dd | |||||||||
|
LDAP system type |
Type of the LDAP system. | |||||||||
|
Display name |
The display name is used to display the domain in the user interface. This is preset with the domain NetBIOS name; however, the display name can be changed. | |||||||||
| Object class | List of classes defining the attributes for this object. The default object class is DOMAIN. However, in the input field, you can add object classes and auxiliary classes that are used by other LDAP and X.500 directory services. | |||||||||
|
Distinguished name |
Distinguished name of the domain. The distinguished name is determined using a template from the full domain name and cannot be edited. | |||||||||
| Canonical name | Canonical name of the domain. | |||||||||
|
Account definition (initial) |
Initial account definition for creating user accounts. This account definition is used if automatic assignment of employees to user accounts is used for this User accounts are only linked to the employee (Linked) if no account definition is given. This is the case on initial synchronization, for example. | |||||||||
|
Target system managers |
Application role in which target system managers are specified for the domain. Target system managers only edit the objects from domains that are assigned to them. Therefore, each domain can have a different target system manager assigned to it. Select the One Identity Manager application role whose members are responsible for administration of this domain. Use the | |||||||||
|
Synchronized by |
Type of synchronization through which the data is synchronized between the domain and One Identity Manager. You can no longer change the synchronization type once objects for these domains are present in One Identity Manager. If you create a domain with the Synchronization Editor, One Identity Manager is used.
NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system. | |||||||||
|
Description |
Text field for additional explanation. | |||||||||
| Structural object class | Structural object class representing the object type. |
On the LDAP tab, enter the following main data.
| Property | Description |
|---|---|
|
Full domain name |
Name of the domain confirming to DNS syntax. <name of this domain>.<name of parent domain>.<name of root domain>. |
|
Distinguished name |
Distinguished name of the domain. The distinguished name is determined using a template from the full domain name and cannot be edited. |
| Structural object class | Structural object class representing the object type. |
| Object class | List of classes defining the attributes for this object. The default object class is DOMAIN. However, in the input field, you can add object classes and auxiliary classes that are used by other LDAP and X.500 directory services. |
| Search mask | Search mask for another LDAP object. |
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
