LDAP query customization

Use the LDAP Query Customization tab to customize your project's query to the LDAP server.

By default, the LDAP server provides a list of all registered users and groups, so in a large or complex network environment, this can result in an impractically long list to manage when you are configuring the security system for your project. You can shorten the list by customizing the query to filter any users who should never have access to your project.

These settings should be configured only by experienced LDAP server administrators.

To customize the LDAP query:

1. In the LDAP Server Settings dialog box, go to the LDAP Query Customization tab.

   

2. Under Query Customization, click Modify.

   You are prompted for your LDAP server credentials.

3. Enter your user name and password, and then click OK.

   You need to have sufficient privileges to save this information to the LDAP server.

4. Select Enable.

   The remaining settings become available for configuration.

5. Configure the Search Base and Filter Query settings as needed.

   The Filter Query string is limited to 2048 characters. For more information, including the proper syntax, see the documentation for your LDAP server.

6. To check the query results at any time, and how your customized query changes those results, click Check Query.

7. If your customized query does return the expected results, review the entity identifiers and attributes.

   Some non-standard LDAP implementations — such as Linux-based LDAP servers and Active Directory Application Mode (ADAM) — use different entity identifiers and attributes. Those can be customized in this dialog box, but again, it should be done only by an experienced LDAP administrator. For example:

   LDAP Server	User name attribute	Group name attribute	User lock attribute
   Active Directory	sAMAccountName	sAMAccountName	userAccountControl
   Active Directory Application Mode (ADAM)	Name	Name	userAccountControl