Viewing or Modifying LDAP Server Configuration Object Properties

View or change properties to an LDAP server configuration object. Any changes to an LDAP server configuration object are applied on subsequent connections. Any connection already started when the change is applied do not reflect the change.

Prerequisites
Database Version LDAP Server Configuration Object Privileges
SAP Sybase IQ 15.3 and 15.4 Not supported.
SAP Sybase IQ 16.0

View any LDAP server property page – none.

Modify any LDAP server property – you must have the MANAGE ANY LDAP SERVER system privilege.

Task
  1. In the Perspective Resources view, select the resource, and select Resource > Administration Console.
  2. In the left pane, expand IQ Servers > Security, and then select LDAP Servers.
  3. Select an LDAP server from the right pane and either:
    • Click the arrow to the right of the name and select Properties, or
    • From the Administration Console menu bar, select Resource > Properties.
    The LDAP Server Properties view appears.
  4. View or edit the properties.
    • When you are modifying properties, you need not click Apply before changing screens; however, doing so saves any changes.
    • If you do not have privileges to modify properties, SAP Control Center displays the properties view in read-only mode.
    Area Description

    General

    Read-only

    Name—Name of the LDAP server configuration object.

    State—Current state of the LDAP server configuration object. Valid states include:
    • RESET – Indicates that one or more attributes on the LDAP server configuration object have been entered or modified since last activation.

    • READY – Indicates that the LDAP server configuration object is ready to accept connections.

    • ACTIVE – Indicates that the LDAP server configuration object has performed at least one successful LDAP user authentication.

    • FAILED – Indicates that there is a problem connecting to the LDAP server configuration object.

    • SUSPENDED – Indicates that the LDAP server configuration object is in maintenance mode, and is not available for LDAP user authentication.

    Last state change—Date and time the LDAP server configuration object state last changed.

    Attributes

    Search URL—The host (by name or by IP address), port number, and search to be performed to look up the DN for a given user ID. For example: ldap://my_LDAPserver:389/dc=MyCompany,dc=com??sub?cn=*

    Authentication URL—The host (by name or by IP address), port number, and search to be performed to look up the DN for a given user ID, or enter NULL.

    Access account—The distinguished name for a user used to connect to the LDAP server configuration object. For example: cn=iqadmin, cn=Users, dc=mycompany, dc=com

    Password—The password for the Access account.

    Encrypted—Indicates that the password is provided in encrypted format.

    Connection timeout—The length of time after which the system stops trying to connect to the LDAP server configuration object. Value can be entered in milliseconds, seconds, or minutes. Valid range is between 1-3600000 milliseconds (3600 seconds or 60 minutes). Default value is 10000 milliseconds.

    Connection retries—The maximum number of connection retries. Valid range is 1-60. Default value is 3.

    Use TLS protocol on LDAP connections—Enables the TLS protocol on LDAP connections.
    Note: This option is unavailable if the SEACH URL value specifies ldps://...
    Comment

    Comment—A text field for adding an optional comment about the LDAP server configuration object.

  5. Do one of:
    • Click OK to update any changes to the database and exit the properties view.
    • Click Apply to update any changes to the database, but remain in the properties view.
    • Click Cancel to cancel any changes not updated to the database and exit the properties view.
Related concepts
LDAP Server Overview
Related tasks
Creating an LDAP Server Configuration Object
Deleting an LDAP Server Configuration Object
Activating an LDAP Server Configuration Object
Suspending an LDAP Server Configuration Object
Refreshing an LDAP Server Configuration Object
Validating a User on an External LDAP Server
Generating LDAP Server Configuration Object DDL Commands
Authenticating a Login Account for a Managed Resource
Related reference
LDAP Server Configuration Object Privilege Summary