Documentation for Crowd 2.0.x. Documentation for other versions of Crowd is available too.

This page provides configuration notes for Sun's Java System Directory Server Enterprise Edition (DSEE, previously called 'SunONE Directory Server'). This page is related to Configuring an LDAP Directory Connector.

Screenshot: Connector — Sun Directory Server Enterprise Edition (DSEE)




Attribute

Description

Connector

The directory connector to use when communicating with the directory server.

URL

The connection URL to use when connecting to the directory server, e.g.: ldap://localhost:389, or port 639 for SSL.

Secure SSL

Specifies if the connection to the directory server is a SSL connection.

Use Node Referrals

Use the JNDI lookup java.naming.referral option. Generally needed for Active Directory servers configured without proper DNS, to prevent a 'javax.naming.PartialResultException: Unprocessed Continuation Reference(s)' error.

Use Nested Groups

Enable or disable support for nested groups on the LDAP user directory.

Use the User Membership Attribute

Put a tick in the checkbox if your directory supports the group membership attribute on the user. (By default, this is the 'memberOf' attribute.) For instructions on enabling this feature in your directory, please refer to the OpenLDAP documentation.

  • If this checkbox is ticked, Crowd will use the group membership attribute on the user when retrieving the members of a given group. This will result in a more efficient retrieval.
  • If this checkbox is not ticked, Crowd will use the members attribute on the group ('member' by default) for the search.
  • If the 'Use Nested Groups' checkbox is ticked, Crowd will ignore the 'Use the User Membership Attribute' option and will use the members attribute on the group for the search.

Use Paged Results

Use the LDAP control extension for simple paged results option. Retrieves chunks of data rather than all of the results at once. This feature may be necessary when using Microsoft Active Directory if more than 999 results are returned for any given search.

Use Relaxed DN Standardisation

This setting determines how Crowd will compare DNs to determine if they are equal. See Configuring Relaxed DN Standardisation.

  • If this checkbox is not ticked, Crowd will parse the DN and then check the parsed version. This is the default and recommended setting for Sun DSEE.
  • If this checkbox is ticked, Crowd will do a direct, case-insensitive, string comparison, which will result in a significant performance improvement. This is only possible if the directory guarantees the format of DNs.

Base DN

Enter the root distinguished name to use when running queries versus the directory server, e.g.: o=acmecorp,c=com.

User DN

The username that Crowd will use when connecting to the directory server.

Password

The password that Crowd will use when connecting to the directory server.

Configuration details for Sun DSEE

Sun DSEE Example

Value

Base DN

dc=acmecorp,dc=com

User DN

cn=Directory Manager

Next Step

Go back to Configuring an LDAP Directory Connector.

RELATED TOPICS

Using Apache Directory Studio for LDAP Configuration
Crowd Documentation