2007 Mar 29 5:08 AM
Hi,
When mapping the fields in LDAPMAP, is anyone aware of a way that I can limit the range of values for my filter field?
I have taken a look to see if there is a function module that can cater for this but can't seem to find anything.
The filter field that I am using is the user id, however I would only like to import users that fall within specified name ranges - since there are a number of system/admin accounts on the Active Directory which I don't want to create on the SAP system.
Would a range of user ids maintained in the RSLDAPSYNC_USER program limit which user ids are imported?
Thanks in advance.
Regards
Sujeet
2007 Mar 30 11:48 AM
Hello,
it is not possible to filter the users in Active Directory. The only way is to create a new mapping field in AD (f.e. SAPUSERNAME) and to synchronize all users with the SAPUSERNAME. AD users without SAPUSERNAME (admins etc.) will not be synchronized.
Alternatively you may use ADAM (Active Directory Application Mode). This is a separate AD, that is synchronized with AD. You can reduce the users, that are synchronized with ADAM (ask your AD staff). Then you do not need a filter in the LDAPMAP.
Kind regards
Rainer
Hi,
When mapping the fields in LDAPMAP, is anyone aware of a way that I can limit the range of values for my filter field?
I have taken a look to see if there is a function module that can cater for this but can't seem to find anything.
The filter field that I am using is the user id, however I would only like to import users that fall within specified name ranges - since there are a number of system/admin accounts on the Active Directory which I don't want to create on the SAP system.
Would a range of user ids maintained in the RSLDAPSYNC_USER program limit which user ids are imported?
Thanks in advance.
Regards
Sujeet
2007 Mar 30 11:48 AM
Hello,
it is not possible to filter the users in Active Directory. The only way is to create a new mapping field in AD (f.e. SAPUSERNAME) and to synchronize all users with the SAPUSERNAME. AD users without SAPUSERNAME (admins etc.) will not be synchronized.
Alternatively you may use ADAM (Active Directory Application Mode). This is a separate AD, that is synchronized with AD. You can reduce the users, that are synchronized with ADAM (ask your AD staff). Then you do not need a filter in the LDAPMAP.
Kind regards
Rainer
| User | Count |
|---|---|
| 4 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |