IBM Connections: Restricting user population using a LDAP Group

Some customers request for restricting user population to IBM Connections bases using a LDAP Group.

You can use IBM Connections TDI Solution to solve this request. Creating a ldap filter that restrict population, based if a user is member of a group.

=Procedure =

In this example LDAP Server is IBM Tivoli Directory Server and group is MyGroup1:

1) Open profiles_tdi.properties and look for source_ldap_search_filter.

source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson))

2) Make a copy of this line, comment and add the groups

source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson)(memberOf=cn=MyGroup1,ou=dept01,o=company))
 * 1) source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson))

3) Change on profiles_tdi.properties

sync_delete_or_inactivate=delete

Save and close the file

4) Now run

sync_all_dns.sh

For 2 or more groups
2) Make a copy of this line, comment and add the groups

source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson)(|(memberOf=cn=MyGroup1,ou=dept01,o=company)(memberOf=cn=MyGroup2,ou=dept01,o=company))

= Ver também =


 * IBM Connections:Reorg Connections Databases
 * IBM Connections:Limpeza de diretórios


 * Mais Artigos sobre IBM Connections IBM Connections