How do I...

• Create and Modify an LDAP Synchronized List?

  1. Click Policy > User Names.
  2. Click New. A dialog box enables you to choose the list type you want to add.

  3. Select LDAP Synchronized User Name List and click Create.

     To edit an existing LDAP Synchronized list, select a list from the available entries and click Edit.

  4. Edit the Overview section to provide the list with a Name or any relevant Notes. Click Save.
  5. Configure the Server Connection details. Use this section to define the LDAP server details and connection properties. Show me

     Server Connection Property	Description
     LDAP Server	Hostname or IP address of the LDAP server
     Secure connection	Option to use Secure LDAP when connecting your Gateway to the LDAP server.
     Port	Port number on which to connect the LDAP server. Firewall ports for a list of default ports.
     User name	Account user name with which the Gateway connects to the LDAP server. Leave blank if anonymous access is required.
     Password	Account password associated with the User name. Leave blank if anonymous access is required.
     Timeout	Connection timeout value in seconds.

     If you change any of the LDAP settings, you must also re-enter the Password to save the changes.

     Click Save.

  6. Use the Search Criteria section to specify the criteria used to retrieve the data from the LDAP server. Click to Save to save the changes. Show me

     Search Criteria	Description	Example
     Target DN for sync	Distinguished Name of the base node of the LDAP directory tree containing the entries with which you want to synchronize. Click Browse to open the Select Base DN dialog box and locate the base node. Maximum entries to display specifies the number of nodes the directory tree displays in the dialog box.	O=MyCompany
     Scope	Scope of the search Select whether to search the base node only (Target Only), the entire tree recursively (Recurse Tree) or only the direct children of the target node (Children of Target).	Recurse Tree
     Filter to Apply	Search filter used to determine which nodes to search ObjectClass=* obtains all LDAP nodes within the specified scope.	objectclass=*
     Attributes to Retrieve	LDAP attributes to be retrieved. Attributes must be comma-separated.	mail,proxyAddresses
     Request Paging	Enables paging requests with a configurable page size.	1000
     Group Expansion	Enables group expansion with maximum expansion depth and selected attributes. Attributes must be comma-separated.	Expansion is enabled using 'member,uniquemember' to a depth of 10.

  7. Apply the configuration.
• Test an LDAP connection?

  1. Configure an LDAP Synchronized List.
  2. Select the list from the available entries and click Edit.

  3. Click Test Query in the Task Panel.

     If the query is successful, the Gateway displays a Query Succeeded dialog including a list of initial results.

     If the query fails, check your server connection and search criteria settings. If necessary, contact your LDAP administrator.

• Synchronize a list with the LDAP directory?

  1. Configure an LDAP Synchronized List.
  2. Select the list from the available entries and click Edit.

  3. Click Synchronize Now in the Task Panel.

     If the synchronization is successful, the Gateway displays a Success notification indicating that the request has been successful. Synchronization of a large amount of data might take some time to complete.

     After a suitable period, refresh the list page by clicking your browser's Refresh button. The Synchronization Status area indicates whether the synchronization was successful, and when the synchronization occurred.

• Remove an LDAP Synchronized List?

  1. Click Policy > User Names.

  2. Select a list from the available entries. Click Delete

  3. Click the Delete button to confirm the deletion.
  4. Apply configuration.

See also...

• About Policy Routes
• About Policy References