Adding an LDAP server

To add an LDAP server

1. Click Settings > LDAP.
2. In the LDAP settings page, click Settings.
3. In the LDAP server settings dialog, enter the LDAP server information and click Next→.
   • Server URL: Enter the IP address or domain name of the LDAP server.
     • The port number can also be included in the Server URL. The default port is 389, and to use SSL/TLS, enter 636.
     • Example: ldap://ldap.company.com, ldap://192.168.1.100, or ldap://ldap.company.com:389
   • Admin DN or CN:: Enter the DN or CN of the LDAP server administrator account.
     • The DN (Distinguished Name) represents a domain component, while the CN (Common Name) signifies a general name.
     • Example: cn=admin,dc=company,dc=com
   • Password: Enter the password for the LDAP server administrator account.
   • Search base: Enter the DN of the group from which to retrieve user information from the LDAP server. This denotes the starting point for user searches within the LDAP directory.
     • Example: ou=users,dc=company,dc=com
   • Search filter: Specifying a particular attribute value reflects it in the LDAP server search results for users. Search results differ when searching without group information versus with group information. Use the examples below to select the desired search filters.
     • When you search for users without group information, enter as follows:
       • Example: uid=*
         
         
         
         
       • Search results will be: Users fetched = 0 , Group fetched = 0
     • When you enter group information and search for a user, enter as follows:
       • Example: (|(cn=*)(uid=*))
         
         
         
         
       • Search results will be: Users fetched = 6 , Group fetched = 4
     • When you use a specific user, enter as follows:
       • Example: (|(cn=cms1)(uid=cms-user1))
         
         
         
         
       • Search results will be: Users fetched = 1 , Group fetched = 1
   • Test: Test the connection using the LDAP server information entered.
     • When successfully connected, "Connected" will be displayed in the Status. Users fetched indicates the number of users found, while Groups fetched shows the number of groups found.
     • If the LDAP server fails to connect properly, further steps cannot be proceeded with.
   Note: If the connection to the LDAP server fails, check the following items.

   • Firewall and port settings for the LDAP server.
   • Hostname, port number, and protocol of the LDAP server.
   • Domain name of the LDAP server.
   • Information regarding the administrator account of the LDAP server.
4. Once the LDAP server is connected, select the user groups and users to synchronize, and then click Save.
   • Enter a user group or username in the search bar at the top to quickly search.
   • Only LDAP users included in the user group can be registered. LDAP users not included in the group cannot be added individually.
5. Click Apply.
   Note:

   • When an LDAP user is a member of multiple groups, information within the group with the same name as the role created in BLAZE takes precedence and is added first.
   • When the LDAP username matches the BLAZE username, an alert message will be displayed at the top of the screen. Click Replace local users in the alert message to delete the local user information in BLAZE and register new information with LDAP users.
   • LDAP users that don't belong to a group on the LDAP server don't appear in search results.

Setting up synchronization with an LDAP server