Advanced directory settings

These settings can be used to define:

  • How User Service searches the directory service to find user, group, and domain information
  • Whether User Service uses an encrypted connection to communicate with the directory service
  • Which character set User Service uses to encode LDAP information

Configure these settings as needed for any LDAP-based directory service.

  1. If you use custom object class types (attribute names) in your directory service, mark Use custom filters. The default filter strings are listed below the check box.
  2. Edit the existing filter strings, substituting object class types specific to your directory. For example, if your directory uses an object class type such as dept instead of ou, insert a new value in the Domain search filter field.

    Attributes are always strings used in searching the directory service contents. Custom filters provide the functionality described here.

    Attribute Description
    User logon ID attribute Identifies user logon names
    First name attribute Identifies the user’s given name
    Last name attribute Identifies the user’s surname
    Group attribute Identifies the group’s name
    MemberOf attribute Specifies that the user or group is a member of another group.

    If you are using Novell eDirectory, this corresponds to the groupMembership attribute.
    User search filter Determines how User Service searches for users
    Group search filter Determines how User Service searches for groups
    Domain search filter Determines how User Service searches for domains and organizational units
    User’s group search filter Determines how User Service associates users with groups
  3. To secure communications between User Service and your directory service, check Use SSL.
  4. To determine which character set User Service uses to encode LDAP information, select UTF-8 or MBCS.

    MBCS, or multibyte character set, is commonly used for encoding East Asian languages such as Chinese, Japanese, and Korean.

  5. Click OK to cache your changes. Changes are not implemented until you click Save and Deploy.