Connect to an LDAP directory

In the

BlackBerry Connectivity Node

console (http:/localhost:8088), click

General settings > Company directory

.

Click .

Select

LDAP

.

In the

Connection name

field, type a name for this company directory connection.

In the

LDAP server discovery

drop-down list, click one of the following: If you want to use automatic discovery, click

Automatic

.

In the

Enable SSL

drop-down list, select whether you want to enable SSL authentication for LDAP traffic. If you click

Yes

, click

Browse

and select the SSL certificate for the LDAP computer.

In the

LDAP port

field, type the port number of the LDAP computer.

In the

Authorization required

drop-down list, select whether authentication is required with the LDAP computer. If you click

Yes

, type the username and password of the LDAP account. The username must be in DN format (for example, CN=Megan Ball,OU=Sales,DC=example,DC=com).

In the

Search base

field, type the search base that you want to access (for example, OU=Users,DC=example,DC=com).

In the

LDAP user search filter

field, type the filter that you want to use for LDAP users. For example: (&(objectCategory=person)(objectclass=user)). If you want to restrict searching to all members of a single group for the entire

Cylance Endpoint Security

tenant, you can use the following example: (&(objectCategory=person)(objectclass=user)(memberOf=CN=Local,OU=Users,DC=example,DC=com)).

In the

LDAP user search scope

drop-down list, click one of the following: If you want user searches to apply to all levels below the base DN, click

All levels

. If you want to limit user searches to one level below the base DN, click

One level

.

In the

Unique identifier

field, type the attribute for each user’s unique identifier (for example, uid). The attribute must be immutable and globally unique for every user.

In the

First name

field, type the attribute for each user’s first name (for example, givenName).

In the

Last name

field, type the attribute for each user’s last name (for example, sn).

In the

Login attribute

field, type the attribute for each user’s login attribute (for example, cn).

In the

Email address

field, type the attribute for each user’s email (for example, mail).

In the

Display name

field, type the attribute for each user’s display name (for example, displayName).

To synchronize more user details from your company directory, select the

Synchronize additional user details

check box. The additional details include company name and office phone.

To enable directory-linked groups, select the

Enable directory-linked groups

check box.

Click

Save

.