How to translate your LDAP URL to the CA Process Automation LDAP operator properties

Document ID : KB000049407
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

The CA Process Automation LDAP operator breaks down the LDAP URL into 3 distinct pieces. This doc will help clarify how to do this.

Solution:

Typically, LDAP accounts are specified with an x500 path descriptor, like this.

  "cn=userid,ou=users,ou=department,ou=office,dc=usa,dc=com" 

The PAM Module configuration interface breaks this common notation down into three components, as follows.

Default user prefix: This is either cn or uid, depending on the first prefix before the first "=" in the X500 notation. In our above example that would be "cn"

Default LDAP User: This is the user display name in AD, or the first parameter in the X500 notation. In the example above, this is "userid".

Default Base DN: This is the path information from the X500 notation, without the user parameter. In the example above, the Default Base DN is "ou=users,ou=department,ou=office,dc=usa,dc=com"

So the operator properties would look like this:

Figure 1

If you are still having trouble getting the LDAP operator to work in CA Process Automation, try installing an LDAP browser and make sure that you can use the LDAP URL to access your directory server.