LDAP Server Attributes

This is the list of LDAP server attributes required for any custom LDAP configuration:

attr_objective	attr_name (Example)	Attribute Description	Required/ Optional
userIdAttributeNames	cn	The username field of a user account (Can include multiple values; Separate with comma or space)	Required
mailAttributeName	mail	The email address field of a user account	Required
firstNameAttributeName	givenName	The first name field of a user account	Required
lastNameAttributeName	sn	The last name field of a user account	Required
objectClassAttributeName	objectClass	The name of the LDAP attribute that contains the object class	Required
userObjectSearchAttributeNames	cn	The name of the LDAP attribute that is used to search for users (Can include multiple values; Separate with comma or space)	Required
userObjectClassAttributeNames	organizationalPerson	The name of the LDAP class that contains users (Can include multiple values; Separate with comma or space)	Required
userObjectCustomLdapQuery	(sAMAccountType=805306368)	The custom LDAP query that is used to search for the LDAP Class of users (Overrides userObjectClassAttributeNames)	Optional
commonNameAttributeName	cn	The common name field of a user account	Required
displayNameAttributeName	cn	The display name field of a user account	Required
userManagerDnAttributeName	manager	The name of LDAP attribute of a user account that contains a manager DN	Required
groupMembersAttributeName	uniqueMember	The name of the LDAP attribute that contains members of group	Required
groupObjectSearchAttributeNames	cn	The name of the LDAP attribute that is used to search for groups (Can include multiple values; Separate with comma or space)	Required
groupObjectClassAttributeNames	orclGroup	The name of the LDAP class that contains groups (Can include multiple values; Separate with comma or space)	Required
groupObjectCustomLdapQuery		The custom LDAP query that is used to search for the LDAP Class of groups (Overrides groupObjectClassAttributeNames)	Optional
groupMailAttributeName	mail	The email address field of a group	Required
groupCommonNameAttributeName	cn	The common name field of a group	Required
groupDisplayNameAttributeName	cn	The display name field of a group	Required
ouObjectSearchAttributeNames	cn	The name of the LDAP attribute that is used to search for organizational units (Can include multiple values; Separate with comma or space)	Required
ouObjectClassAttributeNames	orclContainer, orclSubscriber, orclContext	The name of the LDAP class that contains organization units (Can include multiple values; Separate with comma or space)	Required
ouObjectCustomLdapQuery		The custom LDAP query that is used to search for the LDAP Class of organizational units (Overrides ouObjectClassAttributeNames)	Optional
ouMailAttributeName	mail	The email address field of a organization unit	Required
ouCommonNameAttributeName	cn	The common name field of a organization unit	Required
ouDisplayNameAttributeName	cn	The display name field of a organization unit	Required
uniqueIdAttributeName	cn	Unique identifier attribute for the user (Do not change the unique identifier attribute after the LDAP server support is added) Note: Ignored if isSupportsQueryById is False	Required
isSupportsBrowsing	true	False – Results are not shown in the LDAP browser (Cannot search for objects in LDAP) True – Results are shown in the LDAP browser	Required
isSupportsPaging	true	False – Results in the LDAP browser are not shown in paged groups True – Results in the LDAP browser are shown in paged groups	Required
isSupportsQueryById	false	False – Do not query for results by UID True – Query for results by UID (Requires value for uniqueIdAttributeName)	Required