MACROMEDIA BREEZE-USING THE MACROMEDIA BREEZE MANAGER Manual de usuario descargar pdf (Pagina 6)

6 Best Practice for Breeze Directory Service Integration

To perform a directory integration task, you must be defined as an administrator in your

Breeze profile. An administrator is defined in the Create Administrator screen of the

Application Management Console The administrator’s point of access for Breeze DSI is the

Directory Service Settings tab in the Application Management Console. Setting up and

initiating synchronization with an LDAP server is accomplished with the screens accessible

through this tab.

Working with LDAP

Users and groups in a directory are LDAP called entries. Each entry is a collection of attributes

that has a name, called a distinguished name (DN). The attribute values for user entries

consists of user information such as phone number, e-mail address, and photo. The DN

describes a path to the entry through a hierarchical tree structure.

The DN that refers to a particular entry in the LDAP directory is formed by taking the name

of the entry itself (called a relative distinguished name, RDN) and concatenating it with the

names of its ancestor entries in the tree structure. The way that the tree structure is organized

may reflect geographical locations or departmental boundaries within an organization. For

example, if Alicia Solis is a user in the QA department of Acme, Incorporated in France, the

DN for this user might be:

cn=Alicia Solis, ou=QA, c=France, dc=Acme, dc=com

The DN specifies the path through the tree to the user from the root. In the example above,

the root is specified by

dc=com. Each of the attributes that make up an entry has a type and

one or more values. The values for an attribute depend on what type of attribute it is.

Mnemonic strings are used to specify types, such as

ou for organizational unit or cn for

common name, as in the example above.

Importing users

When importing user entries from an LDAP server, the administrator uses the User Profile

Mapping screen to map Breeze user profile fields to the equivalent attribute in the LDAP

entries. The following example shows a mapping of an LDAP user entry to a Breeze user

profile:

First Name: givenName

Last Name: sn

Email: userPrincipalName

Network Login: sAMAccountName

1 2 3 4 5 6 7 8 9 10 11 ... 23 24

Sin comentarios

MACROMEDIA BREEZE-USING THE MACROMEDIA BREEZE MANAGER Manual de usuario Pagina 6