Add LDAP servers
LDAP synchronization requires that the LDAP server supports persistent search functionality. LDAP import will not work if the Base DN or user names contain spaces.
To add an AD server, do the following:- In System Configuration, select Global Configuration Settings > Network Environment > Directory Services Synchronization.
- Select LDAP in the left menu.
- In the Servers section, click Add server.
-
In the Add New server dialog box, do the
following:
- Enter the LDAP server name.
- Enter the Port number. The default value depends on whether you have the Use SSL checkbox marked or clear.
- In the Base DN field, enter the location within the directory to start the search. For example, if the entire directory is to be searched under an organization of "Equitrac", this would be "O=equitrac". Ensure the Base DN name does not contain spaces, or the import will fail.
- Enter a Login ID. The login ID is the fully qualified user ID (e.g. CN=admin, O=equitrac).
- Enter a Login password.
- Select an LDAP version from the drop-down list.
- Select the Use SSL checkbox to use Secure Socket Layer encryption.
- Click OK to add the new server.
- Click the Edit icon if you wish to make changes to any of the LDAP servers in the list.
- Click the Trash icon to remove any of the domain servers from the list.
- Click the Test icon to open an LDAP Lookup dialog box. Enter a user name and click Lookup. If Persistent Search is enabled, the dialog box shows the LDAP properties for that account. If a search filter (see below) is specified, the lookup only returns users matching the selected filter.
- Optionally, you can move servers and containers up or down the list view with the up or down arrow icons.
- Click Apply to save the server settings.