Page Comparison

Host Name

The host name of your directory server. Examples:

• activedir.example.com

• ldap.example.com

Port

The port on which your directory server is listening. Examples:

• 389

• 10389

• 636 (for secure/encrypted connections - LDAPS)

Use SSL

Likely not required - simply use port 636.

Use this option to turn on alternate SSL option settings in the connection. Be sure to use the matching port. The default port for LDAP with SSL is 636.

Timeout

The number of seconds to wait for a result from an LDAP request before timing out.

Search User DN and Password

The distinguishedName (DN) of the user to login with to perform user searches. This user needs to only be granted view/search privileges. It does not update the directory.

Example: cn=read-only-admin,dc=example,dc=com

These fields aren't always required. They are not used if you have a situation where the user DN can be directly determined via a concatenation of User Attribute, User RDN, Base DN. See more notes on this below this table of settings.

The saved password is not displayed.

Search Filter

The filter used when searching for users in the directory. Examples:

• For LDAPv3: (objectClass=inetOrgPerson)

• For AD: (objectCategory=person)(objectClass=user)(!sAMAccountType=805306370)

Base DN

The root distinguished name (DN) to use when running queries against the directory server. Examples:

• o=example,c=com

• cn=users,dc=ad,dc=example,dc=com

• For Microsoft Active Directory, specify the base DN in the following format: dc=domain1,dc=local.

  • You will need to replace the domain1 and local for your specific configuration.

  • Microsoft Server provides a tool called ldp.exe which is useful for viewing and configuring the LDAP structure of your server.

User Attribute

The attribute of an LDAP user object that specifies the login name of the user. Examples:

• cn

• uid

• sAMAccountName

Additional User RDN

(multiple)

This value is used in addition to the base DN when searching and loading users. If no value is supplied, the search will use the base DN. Example:

• ou=Groups

You can define multiple User DNs and assign each a friendly name that is selected when setting up the user in the user module.

NOTE: the User RDN values should not include the Base DN at the end. The application will automatically append the Base DN so providing it as part of the User RDN will make the final path incorrect. You may see an error in the Error Report:

System.DirectoryServices.DirectoryServicesCOMException (0x80072020): An operations error occurred.