Add/Edit

Top  Previous  Next

Server Settings

Field

Description

Enable Server Lookup

If it is required that when a user is created that the settings are

Type

Defines if the auto create user option performs the user lookup using a Active Directory or LDAP compatible user database as well as Windows NT Primary Domain Controller (PDC).

The Allow Disabled Users option overrides the disabled user flag found in the user database

Server

The server name of the Active Directory or LDAP compatible server should be specified here

Username

The username of the user which has rights to access the user directory. An example of username formatting is below:

Administrator
cn=Administrator, ou=users, dc=ringdale, dc=com

Password

The password of the connecting user should be entered here

Port

The port number of the Active Directory or LDAP server should be specified here, the default port number is 389 (if blank port 389 will be used)

SSL

If your Active Directory or LDAP server requires a secure connection then SSL option should be selected, if selected normally port 636 is also required as this is the LDAP secure port

Root DN

The users tree structure can be defined to look the same as the native user database that they are imported/synchronised from such as Microsoft Active Directory or LDAP compliant user database.

It is important that the LDAP syntax is formatted correctly, an example of a populated LDAP field is below:

LDAP - o=ringdale.com,ou=Administration

 FM_O ringdale.com

         FM_OU Administration

Filter

As standard the filter that is defined assumes a Windows Active Directory user directory, and the filter used in this instance would be:

(&(objectClass=user)(objectCategory=person))

For non-Windows LDAP user directories the filter should either be left blank or a value such as the following should be used:

(objectClass=*)

The filter field can be scaled to a more granular search format.

Scope

There are various scope's that can be used, and they are defined below:

Base - will only search on the base level
One Level - will search on its base level and one sub-level
Sub tree - will search through all levels that are available

User Settings

Field

Description

Username

One can import the username from various Active Directory or LDAP schema fields, as well as the formatting of this field can be defined.

An example of fields is below:

Active Directory
LDAP

One can also import the username with a domain prefix, when using the Domain\Username prefix then the domain will be imported, however this may not be desired and a specified domain maybe more applicable then one should simply select the Specified -> option and in the Options value and enter a value such as the following for Active Directory:

DOMAIN\sAMAccountName

When importing from a non-Active Directory user directory the username is normally set to the following value:

uid

NOTE: This field is case sensitive

Fullname

One can import the users full name from various different fields.

NOTE: This field is case sensitive

Initials

Users

NOTE: This field is case sensitive

Identification (Card)

 

NOTE: This field is case sensitive

Identification (Pin)

 

NOTE: This field is case sensitive

Identification (Other)

 

NOTE: This field is case sensitive

Cost Centre

The users cost centre can be import directly from the user database or a default can be specified

NOTE: This field is case sensitive

Email

The e-mail field can be imported

NOTE: This field is case sensitive

LDAP

The user database tree format can be imported here, the options work in the same principle as the native LDAP user database where O=Organisation and OU=Organisational Unit

Country Code

The user specific country code can also be imported and one can select this here