Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
tutorial:adm:manage_ldap [2019/08/08 15:18]
poulm [Provisioning] 		tutorial:adm:manage_ldap [2020/08/24 17:32] (current)
apeterova generate scheme - multivalued attributes
Line 18: Line 18:
 Switch on **Use VLV Controls** and set **VLV Sort Attribute** to the same value as **Uid Attribute**. Otherwise, searching of accounts doesn't work well in the current version of LDAP connector (first result is skipped due to a bug). Switch on **Use VLV Controls** and set **VLV Sort Attribute** to the same value as **Uid Attribute**. Otherwise, searching of accounts doesn't work well in the current version of LDAP connector (first result is skipped due to a bug).
 </note> </note>
 +
 +==== Base Contexts ====
 +
 +The property **Base Contexts** contains one or more starting points in the LDAP tree that will be used when searching the tree.
 +
 +When you run synchronization in the reconciliation mode, the connector starts the search for every value in the Base Context separately. The search uses paging, which means that the entries are processed in blocks consisting of (by default) 100 records according to the configured (VLV) sort. Be careful, when you have multiple values in the Base Contexts and you **modify distinguished name** of the entries **during the reconciliation**. If entries are moved to a different base, then other entries may be omitted due to the paging and they fall to the **Missing account** state. So try to avoid this use case at all.
  
 ===== Scheme ===== ===== Scheme =====
Line 23: Line 29:
  
 You can let CzechIdM generate scheme for you by click on **Generate scheme** button. You can let CzechIdM generate scheme for you by click on **Generate scheme** button.
 +
 +<note>
 +Generating of a scheme usually marks most attributes as **multivalued** (even for e.g. givenName, sn, cn). This may be OK, but it may also complicate things if you want to fill these attributes from EAVs and transform them - [[https://redmine.czechidm.com/issues/2452|see more]].
 +So make sure to check what was generated.
 +</note>
 +
 But if you want to set everything by yourself: But if you want to set everything by yourself:
  
  • by poulm