View source for IBM Connections: Restricting user population using a LDAP Group

Some customers request for restricting user population to IBM Connections bases using a LDAP Group.

You can use IBM Connections TDI Solution to solve this request. Creating a ldap filter that restrict population, based if a user is member of a group.

=Procedure =

In this example LDAP Server is IBM Tivoli Directory Server and group is MyGroup1:

1) Open '''profiles_tdi.properties''' and look for source_ldap_search_filter. 

 source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson))

2) Make a copy of this line, comment and add the groups

 #source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson))
 source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson)(memberOf=cn=MyGroup1,ou=dept01,o=company))

3) Change on profiles_tdi.properties

 sync_delete_or_inactivate=delete

Save and close the file

4) Now run

 sync_all_dns.sh

== For 2 or more groups ==

2) Make a copy of this line, comment and add the groups

 source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson)(|(memberOf=cn=MyGroup1,ou=dept01,o=company)(memberOf=cn=MyGroup2,ou=dept01,o=company))

= Ver também =

* [[IBM Connections:Reorg Connections Databases]]
* [[IBM Connections:Limpeza de diretórios]]

* Mais Artigos sobre IBM Connections [[IBM Connections]]

[[Category:IBM Connections]]
[[Category:Tuning IBM Connections]]