IBM Connections: Restricting user population using a LDAP Group

From Wiki
Revision as of 12:27, 1 June 2016 by Ebasso (talk | contribs) (Criou página com: 'Some customers request for restricting user population to IBM Connections bases using a LDAP Group. You can use IBM Connections TDI Solution to solve this request. Creating ...')
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Some customers request for restricting user population to IBM Connections bases using a LDAP Group.

You can use IBM Connections TDI Solution to solve this request. Creating a ldap filter that restrict population, based if a user is member of a group.

Procedure

LDAP Server is IBM Tivoli Directory Server and groups are MyGroup1 and MyGroup2

1) Open profiles_tdi.properties and look for source_ldap_search_filter.

source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson))

2) Make a copy of this line, comment and add the groups

#source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson))
source_ldap_search_filter=(&(uid=*)(objectclass=inetOrgPerson)(|(memberOf=cn=MyGroup1,ou=dept01,o=company)(memberOf=cn=MyGroup2,ou=dept01,o=company))

3) Change on profiles_tdi.properties

sync_delete_or_inactivate=delete

Save and close the file

4) Now run

sync_all_dns.sh


Ver também