+

Search Tips   |   Advanced Search

LDAP entity types settings

Use this page to configure LDAP (LDAP) entity types that are supported by the member repositories. To view this console page...

  1. In the console, click Security > Secure administration, applications, and infrastructure.

  2. Under User account repository, select Federated repositories from the Available realm definitions field and click Configure.

  3. Under Related items, click Manage repositories.

  4. Click Add to specify a new external repository or select an external repository that is preconfigured.

  5. Under Additional properties, click LDAP entity types.

  6. Select an entity type to view or change its configuration properties.

When you finish adding or updating your federated repository configuration, go to the Security > Secure administration, applications, and infrastructure panel and click Apply to validate the changes.

 

Configuration tab

Entity type

Specify the entity type.

Object classes

Specify the object classes that are mapped to this entity type. LDAP entries that contain one or more of the object classes belong to this entity type.

You can not map multiple entity types to the same LDAP object class.

Search bases

Search bases that are used to search this entity type.

The search bases specified must be subtrees of the base entry in the repository. For example, you can specify the following search bases, where o=ibm,c=us is the base entry in the repository:

o=ibm,c=us or cn=users,o=ibm,c=us or ou=austin,o=ibm,c=us

In the preceding example, you cannot specify search bases c=us or o=ibm,c=uk.

Delimit multiple search bases with a semicolon (;). For example:

ou=austin,o=ibm,c=us;ou=raleigh,o=ibm,c=us

Search filter

Specify the LDAP search filter that is used to search this entity type.

For example, use (objectclass=ePerson) to search for users or (&(cn=%v)(|(objectclass=groupOfNames)(objectclass=groupOfUniqueNames))) to search for groups in an external LDAP repository.

If a search filter is not specified, the object classes and the relative distinguished name (RDN) properties are used to generate the search filter.




 

Related tasks


Configure LDAP entity types in a federated repository configuration

 

Related Reference

LDAP entity types collection

 

Reference topic