Synchronizing LDAP users in System Manager

Last Updated : Aug 30, 2021 |
Use this procedure to synchronize LDAP users in System Manager.
  1. On the System Manager web console, click UsersDirectory SynchronizationSync Users.
  2. On the User Synchronization page, on the Synchronization Datasources tab, click New.
  3. On the New User Synchronization Datasource page, in the Directory Parameters section, do the following:
    1. In the Datasource Name field, enter the name to identify Active Directory.
    2. In the Host field, enter the FQDN address of your LDAP server.
      ADDITIONAL INFORMATION:
      Ensure that LDAP certificates contain a SAN entry.
    3. In the Principal field, enter the LDAP login details.
      ADDITIONAL INFORMATION:
      For example, myDomain\Administrator.
    4. In the Password field, enter the password for the LDAP login account that you specify.
    5. In the Port field, enter the port number as 636.
    6. In the Base Distinguished Name field, enter the LDAP details.
      ADDITIONAL INFORMATION:
      For example, CN=user,DC=myDomain,DC=com
    7. In the Search Filter field, enter the LDAP search string.
      ADDITIONAL INFORMATION:
      For example, CN=Alex*.
    8. In the LDAP User Schema field, enter the LDAP User Schema details.
    9. Select the Use SSL check box.
    10. Click Test Connection.
  4. On the New User Synchronization Datasource page, in the Attribute Parameters section, do the following:
    1. Click Add Mapping to add a row.
    2. From the drop-down list on the left, select cn.
    3. From the corresponding drop-down list on the right, select sourceUserKey.
    4. Click Add Mapping to add another row.
    5. From the drop-down list on the left, select mail.
    6. From the corresponding drop-down list on the right, select loginName.
      ADDITIONAL INFORMATION:
      Note:
      Instead of the mail field pointing to loginName, you can also use userPrincipalName depending on the configuration of the LDAP server. For example, if the mail field is not set in the LDAP server.
    7. Click Add Mapping to add another row.
    8. From the drop-down list on the left, select sn.
    9. From the corresponding drop-down list on the right, select surname.
    10. Click Add Mapping to add another row.
    11. From the drop-down list on the left, select givenName.
    12. From the corresponding drop-down list on the right, select givenName.
    13. Click Add Mapping to add another row.
    14. From the drop-down list on the left, select displayName.
    15. From the corresponding drop-down list on the right, select displayName.
  5. Click Save.
  6. On the User Synchronization page, click Active Synchronization Jobs.
  7. Click Create New Job.
  8. On the New User Synchronization Job page, in the Datasource Name field, select the LDAP server and click Run Job.
    ADDITIONAL INFORMATION:
    Wait for the job to complete so that all LDAP users are loaded in System Manager.
  9. On the User Synchronization page, click Synchronization Job History.
  10. In the Status column, verify that the status of the job is RUNNING.
    STEP RESULT:
    The status changes to COMPLETED when the job is complete.