LDAP specific main data for LDAP domains
On the LDAP tab, enter the following main data.
Table 24: LDAP data
|
Full domain name |
Name of the domain confirming to DNS syntax.
<name of this domain>.<name of parent domain>.<name of root domain>. |
|
Distinguished name |
Distinguished name of the domain. The distinguished name is determined using a template from the full domain name and cannot be edited. |
| Structural object class |
Structural object class representing the object type. |
| Object class |
List of classes defining the attributes for this object. The default object class is DOMAIN. However, in the input field, you can add object classes and auxiliary classes that are used by other LDAP and X.500 directory services. |
| Search mask |
Search mask for another LDAP object. |
Defining categories for inheritance by LDAP groups
In One Identity Manager, user accounts can selectively inherit groups. To do this, groups and user accounts are divided into categories. The categories can be freely selected and are specified using a mapping rule. Each category is given a specific position within the template. The template contains two tables; the user account table and the group table. Use the user account table to specify categories for target system dependent user accounts. In the group table, enter your categories for the target system-dependent groups. Each table contains the category positions position 1 to position 63.
To define a category
-
In the Manager, select the domain in the LDAP > Domains category.
-
Select the Change main data task.
-
Switch to the Mapping rule category tab.
-
Extend the relevant roots of the user account table or group table.
-
To enable the category, double-click 
.
-
Enter a category name of your choice for user accounts and groups in the login language that you use.
- Save the changes.
Detailed information about this topic
Editing the synchronization project for an LDAP domain
Synchronization projects in which a domain is already used as a base object can also be opened in the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization Editor is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.
NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor.
To open an existing synchronization project in the Synchronization Editor
-
In the Manager, select the LDAP > Domains category.
-
Select the domain in the result list.
-
Select the Change main data task.
-
Select the Edit synchronization project task.
Related topics
Displaying the LDAP domain overview
Use this task to obtain an overview of the most important information about a domain.
To obtain an overview of a domain
-
In the Manager, select the LDAP > Domains category.
-
Select the domain in the result list.
-
Select the LDAP domain overview task.
