Active directory binding

In the User management module of the AdminClient, there is an Active Directory connection option for importing users and groups from the Active Directory to octoplant.The LDAP or LDAPS protocol is used by default.

• In the case of an automatic import, users and groups are imported into octoplantat regular intervals. The system automatically imports once a day at a predefined time users and groups from the Active Directory to octoplant.

• With manual import, you decide yourself when and how often you import users and groups from Active Directory. Users and groups can be quickly transferred to the octoplantsystem if required.

For both automatic and manual import, a configuration dialog must be used to specify which users and groups are to be imported from the Active Directory tooctoplant . The configuration needs to be activated. Without activation, imports are not possible.

Alternatively, you can run synchronization with the Active Directory via the command line. For more information, see the tutorial Functions called via the command line.

 

 

If the user has been imported from the Active directory and the LDAP sychronization is in use, only the Superadministrator can change the assignment of users to different groups. To activate the user/group assignment function for all users, configure the server.ini file on the octoplant server as follows:

[Common] EnableMembershipTree=Y

For more information on making changes on the server.ini, please refer to our documentation on INI files.

 

Related topics
INI files

---