Use this procedure to synchronize LDAP users in System Manager.
Procedure
On the System Manager web console, click Users > Directory Synchronization > Sync Users.
On the User Synchronization page, on the Synchronization Datasources tab, click New.
The New User Synchronization Datasource page opens.
In the Directory Parameters section, in the Datasource Name field, enter the name to identify Active Directory.
In the Host field, enter the FQDN address of your LDAP server.
Ensure that LDAP certificates contain a SAN entry.
In the Principal field, enter the LDAP login details.
For example, myDomain\Administrator.
In the Password field, enter the password for the LDAP login account that you specify.
In the Port field, enter the port number as 636.
In the Base Distinguished Name field, enter the LDAP details.
For example, CN=myDomain.com,DC=myDomain,DC=com
In the Search Filter field, enter the LDAP search string.
For example, CN=Alex*.
Select the Use SSL check box.
Click Test Connection.
In the Attribute Parameters section, click Add Mapping to add a row.
From the drop-down list on the left, select cn.
From the corresponding drop-down list on the right, select sourceUserKey.
Click Add Mapping to add another row.
From the drop-down list on the left, select mail.
From the corresponding drop-down list on the right, select loginName.
Note:
Instead of the mail field pointing to loginName, you can also use userPrincipalName depending on the configuration of the LDAP server. For example, if the mail field is not set in the LDAP server.
Click Add Mapping to add another row.
From the drop-down list on the left, select givenName.
From the corresponding drop-down list on the right, select surname.
Click Add Mapping to add another row.
From the drop-down list on the left, select givenName.
From the corresponding drop-down list on the right, select givenName.
Click Add Mapping to add another row.
From the drop-down list on the left, select givenName.
From the corresponding drop-down list on the right, select displayName.
Click Save.
On the User Synchronization page, click Active Synchronization Jobs.
Click Create New Job.
On the New User Synchronization Job page, in the Datasource Name field, select the LDAP server and click Run Job.
Wait for the job to complete so that all LDAP users are loaded in System Manager.
On the User Synchronization page, click Synchronization Job History.
In the Status column, verify that the status of the job is RUNNING.
The status changes to COMPLETED when the job is complete.
