This is an old revision of the document!


LDAP Synchronization

Getting Started

The synchronization of the Stages user database with a LDAP directory is configured in a specific section of the PKitConfig.xml file. The LDAP configuration is defined in the tag section.

The config.xml file can be found under: <font inherit/Courier New,Courier,monospace;;inherit;;inherit><Stages folder>/stages/conf</font>

Basic Configuration

<ldap
 refreshIntervalMinutes="INTERVAL"
 maximumDeletionPercentage="0">
 <ldap-provider url="ldap://SERVER/DIRECTORY"
 key="authenticationUsername">
 <ldap-authentication
 type="simple"
 principal="%">
 </ldap-authentication>
 <ldap-attribute name="username" id="sAMAccountName"/>
 <ldap-query-user name="QUERYUSER" credentials="PWD" />
 </ldap-provider>
</ldap>
  • INTERVAL – synchronization interval in minutes
  • SERVER – hostname and port of the LDAP server
  • DIRECTORY – DN of the directory containing the user entres
  • QUERYUSER & PWD– DN and password of user to be used for queries