Obtain LDAP entry attributes
To obtain LDAP entry attributes, you need connection parameters. See LDAP connection parameters for details.
- From the command line, use the ldapsearch utility (OpenLDAP client) to retrieve LDAP entry attributes by running
ldapsearchwith your parameter values:
Example command to retrieve entries
ldapsearch -H Your-LDAP-server-address -b "Your-container-DN" -D "Your-user-account-DN" -w "Your-password"
Command parameters
| Parameter | Description | Example |
|---|---|---|
-H | LDAP server address | ldap://10.11.12.7 |
-b | Container DN (search base) where entries are searched. Note You need to search both user and group entries | cn=Users,dc=shturval,dc=lab |
-D | User account DN for LDAP connection | cn=Administrator,cn=Users,dc=shturval,dc=lab |
-w | User password for LDAP connection | dkjhdfss |
- In the user entry response, find attributes that contain:
- full user name;
- unique user name;
- user email address with UPN suffix and @;
- UPN suffix for the user email address. You can specify an email suffix instead of the full email address
- In the group entry response, identify the attribute that contains the common (short) group name.
Use the attribute names you found to configure search in Shturval.
Note Attribute names are case-sensitive when configuring search.
When you have LDAP entry attributes, proceed to configure LDAP integration in the platform.