LDAP User
An LDAP user is an access user that is bound with an LDAP synchronization policy. During every synchronization process, attribute values on the LDAP server are synchronized to the access users. Note that services are not synchronized.
Each LDAP synchronization policy is associated with an LDAP server. When adding an LDAP server, you need to configure an argument called Real Time AuthN. If you select Yes for it, bound users are not authenticated in INC; they are authenticated in the LDAP server. Otherwise, they are authenticated in INC. However, there is one exceptional case, where INC cannot synchronize passwords from some LDAP servers (such as Microsoft Active Directory) (the user password is null in INC). If this is true, bound users are authenticated in the LDAP server even if you do not select Yes for the Real Time AuthN argument.
The INC system provides the following methods to display the LDAP user management page:
- Click the User tab and select Access User > LDAP User from the navigation tree to display all users that are bound to LDAP synchronization policies. You can view LDAP users, but you cannot bind them to or unbind them from the synchronization policies.
- Click the User tab, select User Access Policy > LDAP Service > Sync Policy from the navigation tree, and click
of a synchronization policy to view all users that are bound to the policy. You can bind other users to or unbind existing users from the policy.And we provide you the "Batch Bind" and the "Batch Unbind" configuration functions.
Functions
Bind Users with LDAP
- Click Batch Bind to display access users not bound with any LDAP synchronization policy.
- Use the basic query or advanced query function to display desired access users.
- Select access users to be bound.
- Click OK.
Unbind Users
- Select the access users to be unbound.
- Click Batch Unbind.
Query Bound Users
- Set the query conditions, including the account name, service name, and user status.
- Click Query to continue or click Reset to restore the default query conditions.
Precautions
- An access user can be bound with only one LDAP synchronization policy.
Related Topics