Creating an LDAP Container Using an LDAP Query Source

An LDAP query is used to identify the directory entries that will be candidate resources.

The following diagram shows an example of how calls to the DirectoryService functions can be used to create an LDAP container using an LDAP Query Source.

Creating an LDAP Container Using an LDAP Query Source

Procedure

  1. Find out the LDAP Connection Shared Resources that are configured in ActiveMatrix Administrator by calling listLdapConnections.

    Only those whose instance name is prefixed with "ldap/de/" are listed.

    One of the returned sources must be specified as the primary LDAP source when calling saveContainer to create the LDAP container.

  2. Call listAttributeNames to get LDAP attributes that can be used in the required LDAP query when calling saveContainer in the next step.
  3. Call saveContainer to create and save a new LDAP container.

    The required parameters are:

    • name - This is the name you want assigned to the new LDAP container. It must be unique on the Directory Engine.
    • primary-ldap.ldap-alias - You must specify a primary LDAP source, and one that identifies a valid LDAP connection. A list of the available LDAP sources were returned from listLdapConnections in Step 1.
    • primary-ldap.ldap-query - Each LDAP source, whether primary or secondary, must specify a valid LDAP query. LDAP queries can be validated against a named LDAP connection using the executeLdapQuery function. For information about LDAP queries, see LDAP Queries.

      Additional optional parameters are also available for adding secondary LDAP sources, setting up organizational relationships, and so on. For information about those parameters, see saveContainer.