LDAP Data Source

Adding an LDAP Data Source

You can add an LDAP data source and configure it to behave like a relational table. During introspection, TDV maps all LDAP data types to the string data type.

The Active Directory objectGUID attribute displays in the "binding GUID string" format. For example, c208521a-6fcd-43f2-90ad-ed790c9715c1. If a value for the objectGUID comes from anywhere other than LDAP or is specified in a TDV view or script, that value must use the same dashed string format.

To add an LDAP data source

1. Right-click at a location in the Studio resource tree where you want this data source to reside, and select New Data Source.
2. In the New Physical Data Source dialog, select LDAP and click Next.
3. Type a name for the data source.

When the process of adding the data source is complete, this name is displayed in the Studio resource tree representing the data source.

4. On the Basic tab, provide this information:
URL—Type the path to the LDAP data source in the URL field, in the following format:

ldap://<host_name>:<port_number>/o=<organization_name>

For example:

ldap://platinum:370/o=earth.com

The directory suffix depends on how the LDAP is set up: o for organization, ou for organizational unit, cn for common name, dn for distinguished name, or dc for domain component.

Login—Valid username, if required, to access the underlying data source. When the data source is used as a target for cache tables or for data ship, the sign-in user must be granted the ability to create tables, execute DDL, and perform other tasks. In some cases, the LDAP connection does not require a username.

Example of a username: cn=Ldap Manager

Password—Valid password, if required, to access the underlying data source. In some cases, the LDAP connection does not require a password.
Save Password—Check box is enabled only if Pass-through Login (further down in this window) is enabled. Refer the User Guide, Section About Pass- Through Login for additional details.
Authentication—Choose the method the LDAP client is to use to authenticate itself to the data source.
Simple: The client sends the LDAP server its fully qualified domain name and a clear-text password. This authentication mechanism can be used within an encrypted channel such as SSL, if it is supported by the LDAP server.
Digest
Kerberos
Pass-through Login—Choose whether pass-through login is to be Enabled or Disabled. Refer the User Guide, Section About Pass-Through Login for additional details.
5. Click the Advanced tab.
6. On the Advanced tab, provide this information:
Delimiter—Select a field delimiter from among the following supported options:

, (comma)
. (period)
: (colon)
; (semicolon)
/ (forward slash)
\ (backward slash)
| (vertical bar)

Connection Pool Min Size—Minimum number of connections per connection identity (data source) that can be maintained concurrently (default 10).
Connection Pool Max Size—Maximum number of connections per connection identity (data source) that can be maintained concurrently (default 100).
Connection Pool Timeout (s)—Number of seconds (default 30) that a connection can remain idle in the pool without being closed and removed from the pool.
Execution Timeout (s)—Number of seconds an execution query on the data source is allowed to run before it is canceled. The default value of zero seconds lets even long processes run to completion.
7. Click one of these buttons:
Create & Introspect—To proceed immediately with introspection.
Create & Close—To create the data source; you can introspect at a later time.
8. Refer the User Guide, Chapter Retrieving Data Source Metadata for how to introspect (now or later).