Register LDAP servers

You must have a registered LDAP (Lightweight Directory Access Protocol) server to use Policy Assignment Rules, to enable dynamically assigned permission sets, and to enable Active Directory User Login.

Important
ePO - On-prem only supports Microsoft Active Directory to synchronize and import systems into the System Tree, apply policies on those systems, and apply user-based policies based on LDAP users and groups. No other LDAP server types are supported.

For details about product features, usage, and best practices, click ? or Help.

Select Menu → Configuration → Registered Servers, then click New Server.
From the Server type menu on the Description page, select LDAP Server, specify a unique name and any details, then click Next.
Choose whether you are registering an OpenLDAP or Active Directory server in the LDAP server type list.
Note
The rest of these instructions assume that an Active Directory server is being configured. OpenLDAP-specific information is included where required.
Choose if you are specifying a Domain name or a specific server name in the Server name section.
Use DNS-style domain names. For example, internaldomain.com and fully qualified domain names or IP addresses for servers, and server1.internaldomain.com or 192.168.75.101.
Using domain names gives failover support, and allows you to choose only servers from a specific site if wanted.
Note
You must use server names with OpenLDAP servers. You can't use domain names with OpenLDAP servers.
Choose if you want to Use Global Catalog.
This option is deselected by default. Selecting Use Global Catalog can provide significant performance benefits. Only select this option if the registered domain is the parent of only local domains. If non-local domains are included, chasing referrals could cause significant non-local network traffic, possibly severely impacting performance.
Note
Use Global Catalog is not available for OpenLDAP servers.
If you have chosen to not use the Global Catalog, choose whether to Chase referrals or not.
Chasing referrals can cause performance problems if it leads to non-local network traffic, whether a Global Catalog is used.
Choose whether to Use SSL when communicating with this server or not.
If you are configuring an OpenLDAP server, enter the Port.
Enter the User name and Password.
A Domain Admin account is recommended as it covers all required permissions. To assign specific access rights instead of full Domain Admin privileges, see KB79316.
- Active Directory: Use domain\username format.
- OpenLDAP: Use cn=User,dc=realm,dc=com format.
Either enter a Site name for the server, or select it by clicking Browse and navigating to it.
Click Test Connection to verify communication with the server as specified. Change information as needed.
Click Save to register the server.