Neoview User Management and Security Administration Guide (R2.5)

UserIdentifierFormat domain\user
Both keywords, user and domain, are required in the parameter value. The separator character
can be any printable character except a hyphen, an asterisk, or a space. (Space characters are
ignored.)
This parameter can occur only once in the configuration description file.
UserIdentifierMapping (Active Directory only)
This parameter specifies how the user's login text, specified by UserIdentifierFormat, maps
to the contents of the attribute specified by UserIdentifier. For example, let's say that the
format of a user's login text is
everest\marychocolate
In this case, the value of UserIdentifierFormat is specified as
UserIdentifierFormat domain\user
However, this convention does not require the value of the UserIdentifier attribute to have
the same format. For example, the value of UserPrincipalName for the person who logs on as
everest\marychocolate might be
[e-mail]
You use the UserIdentifierMapping parameter to describe the mapping.
This parameter can be defined only in the default configuration file or as a Common Parameter
in HPDM and has the format:
UserIdentifierMapping format
In the example just described, the value of UserIdentifierMapping is as follows:
UserIdentifierMapping user@domain.*
In this case, whereas the user keyword is required; the domain is not if user identifiers are
unique across domains. The asterisk (*) in this format is a wildcard representing any number of
characters.
This parameter can occur only once in a configuration description file. If you don't use
UserIdentifier, an error is reported.
DomainAttribute (Active Directory only)
This parameter specifies the attribute that contains the user's domain name. This might be the
same attribute specified as the value of UserIdentifier, for example:
DomainAttribute userPrincipalName
This parameter can be defined only in the default configuration or as a Common Parameter in
HPDM and has the format:
DomainAttribute attribute
If the configuration of a server contains both UserIdentifierFormat and DomainAttribute,
then DomainAttribute indicates how to find the user's domain in a case in which the user
omits the domain from the logon text. (If the user includes a domain in this case, the user-supplied
domain name supersedes the value in this attribute.)
74 LDAP Server Configuration on Neoview