User's Manual

Managing Security Functions
User Profile Management 4-7
3. Click the Use existing repository option, click the drop-down list, and select a repository.
The User Authentication Repository dialog box displays, which lists all users in a remote repository.
Y
ou can use the Show new accounts only check box to remove users that are already in the Active
System Manager system, to avoid duplication. If duplicates are found, you are prompted by the Active
System Manager system, as a warning.
4. Select (at least) one user to import and for those to create Active System Manager profiles.
5. Click Finish to complete the import process.
Adding an LDAP/AD Repository
Note To perform this procedure, you must contact your system administrator to populate the following
enterprise-specific fields.
Figure 4-5 represents a tree structure where each node represents an organizational unit within the LDAP
repository. There is one root-level organizational unit called “system”, which has two nodes: “group1” and
“group2”. Group1 has a subgroup named “Sub-group1” and Group2 has a subgroup named “Sub-group2”.
In the Active System Manager application, while defining an external authentication repository, there are
two parameters, apart from others, which determine the behavior of the application; for example:
• Bind DN—Aids in establishing a context with the external security store, which is required to perform
any operation on the security store.
• Base DN—Used to search users at a particular, organizational unit level.
Figure 4-5 External LDAP Repository
When a user adds or update a remote security store in the Active System Manager software, the value
specified under “Bind DN” has two components; i.e., a user ID (UID) and organizational unit (OU).
The UID used in the figure should be available at the same OU, which is specified with the “ou” attribute;
otherwise, the Active System Manager repository is unable to establish a context with the external security
store and hence no further operation (retrieving users, etc.) can be performed.
Secondly, the Base DN attribute (that is accepted by the Active System Manager software), describes the
organizational unit level relative to the “ou” attribute specified under the Bind DN attribute, from where
the users are to be picked up.