# Using LDAP Directory Servers

You should be able to use EMS with external directory servers that are compliant with LDAP v2 or higher.

The description for `tibemsd.conf` provides the complete list of configuration parameters for configuring an external directory server. The following table describes parameter settings for default configurations of popular LDAP servers.

External Directory Server | Parameter Configuration
--- | ---
Active Directory |
    ldap_principal = CN=Administrator, CN=Users, DC=<your_domain>
    ldap_user_class = user
    ldap_user_attribute = cn
    ldap_user_filter = (&(cn=%s)(objectclass=user))
    ldap_group_filter = (&(cn=%s)(objectclass=group))
    ldap_static_group_class = group
    ldap_static_group_attribute = cn
    ldap_static_member_attribute = member
    ldap_static_group_member_filter = (&(member=%s)(objectclass=group))
OpenLDAP |
    ldap_user_class = person
    ldap_user_attribute = cn
    ldap_user_base_dn = ou=people, dc=<your_domain_component>, dc=<your_domain_component>
    ldap_user_filter = (&(cn=%s)(objectclass=user))
    ldap_group_base_dn = ou=groups, dc=<your_domain_component>, dc=<your_domain_component>
    ldap_group_filter = (&(cn=%s)(objectclass=groupofnames))
    ldap_static_group_class = groupofnames
    ldap_static_group_attribute = cn
    ldap_static_member_attribute = member
    ldap_static_group_member_filter = (&(member=%s)(objectclass=groupofnames))
Novell |
    ldap_user_class = person
    ldap_user_attribute = cn
    ldap_user_base_dn = ou=people, o=<your_organization>
    ldap_user_filter = (&(cn=%s)(objectclass=person))
    ldap_group_base_dn = ou=groups, o=<your_organization>
    ldap_group_filter = (&(cn=%s)(objectclass=groupofnames))
    ldap_static_group_class = grouponames
    ldap_static_group_attribute = cn
    ldap_static_member_attribute = uniquemember
    ldap_static_group_member_filter = (&(uniquemember=%s)(objectclass=groupofnames))

Copyright © Cloud Software Group, Inc. All rights reserved.