Using LDAP Directory Servers

You should be able to use EMS with external directory servers that are compliant with LDAP v2 or higher.

The description for tibemsd.conf provides the complete list of configuration parameters for configuring an external directory server. The following table describes parameter settings for default configurations of popular LDAP servers.

External Directory Server Parameter Configuration
Active Directory
ldap_principal = CN=Administrator, CN=Users, DC=<your_domain>
ldap_user_class = user
ldap_user_attribute = cn
ldap_user_filter = (&(cn=%s)(objectclass=user))
ldap_group_filter = (&(cn=%s)(objectclass=group))
ldap_static_group_class = group
ldap_static_group_attribute = cn
ldap_static_member_attribute = member
ldap_static_group_member_filter = (&(member=%s)(objectclass=group))
OpenLDAP
ldap_user_class = person
ldap_user_attribute = cn
ldap_user_base_dn = ou=people, dc=<your_domain_component>, dc=<your_domain_component>
ldap_user_filter = (&(cn=%s)(objectclass=user))
ldap_group_base_dn = ou=groups, dc=<your_domain_component>, dc=<your_domain_component>
ldap_group_filter = (&(cn=%s)(objectclass=groupofnames))
ldap_static_group_class = groupofnames
ldap_static_group_attribute = cn
ldap_static_member_attribute = member
ldap_static_group_member_filter = (&(member=%s)(objectclass=groupofnames))
Novell
ldap_user_class = person
ldap_user_attribute = cn
ldap_user_base_dn = ou=people, o=<your_organization>
ldap_user_filter = (&(cn=%s)(objectclass=person))
ldap_group_base_dn = ou=groups, o=<your_organization>
ldap_group_filter = (&(cn=%s)(objectclass=groupofnames))
ldap_static_group_class = grouponames
ldap_static_group_attribute = cn
ldap_static_member_attribute = uniquemember
ldap_static_group_member_filter = (&(uniquemember=%s)(objectclass=groupofnames))