Attributes tab

LDAP attributes map to system properties.
Figure 403.   Attributes tab
Image

You access this tab by navigating to Controller (System) Setup > Remote Devices > Remote Drivers, double-clicking the LdapNetwork driver row in the table, clicking the Ldap Servers tab, double-clicking the Ldap Server row, and clicking the Attributes tab.

Database columns

Column Description
Display Name
Reports the name that describes the event or function.
Mandatory Indicates if this attribute is required or not.
Parent Class Identifies the owner of this attribute.
Data Type Identifies the type of data: Boolean, numeric, enum or string.
Description Provides additional information.
MappedORD Reports the parent class and system property for the attribute.
isRDN Indicates if this property is the relative distinguished name (RDN), that is, the primary piece of information used to identify a record in the database. This is usually the uid (user ID).

Discovered columns

Column Description
attrName Reports the name of the attribute.
isMandatory Indicates if this attribute is required or not.
parentClass Identifies the owner of this attribute.
dataType Identifies the type of data: Boolean, numeric, enum or string.
description Provides additional information.

Discover attributes window

This window defines the object classes used to filter the search of LDAP database records.

You access this window when you click the Import button on the Ldap Server or Attributes tabs.

Figure 404.   Discover attributes window with two object classes
Image

This window opens when you click the Discover button under LDAP Attributes Manager.

Discover window opens.

Image
Fill in the Discover criteria and click OK:
  • Group Search Base: Click Image to open Sting Chooser and select the group search base as DC=tridium2012,DC=net. This refers to the parent class.
  • Group Search Filter: Click Image to open Sting Chooser and select group search filter as group. This will search all the groups in the parent class. can add, edit, or delete group search filter in the Sting Chooser.
  • Group Search Scope: Select Subtree Scope as group search scope from the drop-down list. This will search up to all the child nodes for the selected Group Search Base and Group Search Filter.

Control buttons:

  • Image Add opens a view or window for creating a new record in the database.
  • Image Edit opens the Edit window.
  • Image Delete removes the selected record (row) from the database table. This button is available when you select an item.

The list may contain multiple object classes for discovery.

Property Value Description
Object Class List/Object Class Name text Defines the piece of information that identifies to which group each attribute record belongs. For example, an Object Class Name of “badge” identifies an attribute as a piece of badge information, such as facility code, Wiegand format, etc. An object class of “person” identifies attributes associated with employees, such as last name, first name, person ID, etc.

LDAP Attributes Manager pane

In addition to the standard control buttons (Delete, Filter, Refresh, and Learn Mode), these buttons in the Database pane apply specifically to LDAP configuration:

  • Image Discover identifies the LDAP attributes that are available to be assigned to system properties.
  • Image Back and forward arrow icons in the center of the view, equal with the Discovered title, page through multiple discovered results, go to a specific page, and control the number of items that appear on each page.

The

LDAP Attributes Manager columns

Column Description
Display Name Identifies the attribute.
Mandatory Indicates if the property is required by the LDAP server.
Parent Class Identifies the parent class in the LDAP server hierarchy.
Data Type Identifies the type of data: String, Boolean, etc.
Description Reports the text entered for Description when the attribute was mapped.
MappedORD Defines the parent class and property to which the attribute is mapped in the system.
isRDN Indicates if this property is the relative distinguished name (RDN), that is, the primary piece of information used to identify a record in the database. This is usually the uid (user ID).

Discovered pane

To view the Discovered pane, click the Discover control button (Image).

In addition to the standard control buttons (Filter and Export), these buttons apply specifically to LDAP configuration:

  • Image Add moves the selected discovered attribute from the Discovered pane to the LDAP Attributes Manager pane.
  • Image Match associates the selected attribute in the LDAP Attributes Manager pane with its discovered and selected LDAP equivalent in the Discovered pane.

LDAP Discovered columns

Column Description
attrName Identifies the attribute in the LDAP server.
isMandatory Indicates if the property is required by the LDAP server.
parentClass Identifies the parent class in the LDAP server hierarchy.
dataType Identifies the type of data: String, Boolean, etc.
description Reports the text entered for Description when the attribute was mapped.
AttributeExists Attribute exists defaults to false.