User guide

Chapter 2: Environment Setup (SSO Administrators)
2-22
.com,Leader
ADD,user004,user004,user004,user004,user004,100004,[e-mail]
.com,Leader
ADD,user005,user005,user005,user005,user005,100005,[e-mail]
.com,General
ADD,user006,user006,user006,user006,user006,100006,[e-mail]
.com,General
Rule File
The rule file associates the above CSV data with the user information entry attributes as shown below.
In the example of the role file, the following items are set:
Rule Name
sso rule
Public Directory
ou=User,ou=interstage,o=fujitsu,dc=com
Entry Attribute that Uniquely Identifies the User
uid
Operation
ADD (addition)
Attributes to be set According to CSV Data
cn, sn, givenName, uid, userPassword, employeeNumber, mail, ssoRoleName
Attributes to be set as a Fixed Value
ssoAuthType, ssoCredentialTTL, ssoNotBefore (*1)
*1 In the following example, the date is specified in the format YYYYMMDDHHMMSS+XXXX.
'+XXXX' refers to the time difference from UTC (Universal Time Coordinate). In cases where '-
XXXX' is used, it means the same as above.
<?xml version="1.0" encoding="EUC-JP" ?>
<!-- Cannot be modified -->
<!DOCTYPE Csv2Directory [
<!ELEMENT Rule (name, baseDn, midDn?, Rdn+, DnChange?, objectClass+,
attributeSeparator?, unique*, CSV, fixed?)>
<!ELEMENT CSV (ldapop?, Attribute)>
<!ELEMENT ldapop (op?, ldapadd?, ldapdelete?, ldapmodify?)>
<!ELEMENT name (#PCDATA)>
<!ELEMENT baseDn (#PCDATA)>
<!ELEMENT Rdn (#PCDATA)>
<!ELEMENT objectClass (#PCDATA)>
<!ELEMENT attributeSeparator (#PCDATA)>
<!ELEMENT op (#PCDATA)>
<!ELEMENT ldapadd (#PCDATA)>