Using Directory Services

Use ConnectString to define directory services properties.

To use directory services, add these properties to ConnectString:
DSURL=ldap://SYBLDAP:389/dc=sybase,dc=com??one?sybase Servername=MANGO

The URL is an LDAP URL and uses LDAP libraries to resolve the URL.

To support high availability on the LDAP server, the DSURL accepts multiple URLs, separated by a semicolon:

DSURL={ldap://SYBLDAP:389/dc=sybase,dc=com??one?sybaseServername=MANGO};

The provider attempts to get the properties from the LDAP servers in the order specified. For example:

ldap://hostport/dn[?attrs[?scope[?filter[?userdn?userpass]]]]

where:

  • hostport is a host name with an optional portnumber, for example, SYBLDAP1:389.

  • dn is the search base, for example, dc=sybase,dc-com.

  • attrs is a comma-separated list of attributes requested from the LDAP server. You must leave it blank. Data Provider requires all attributes.

  • scope is one of three strings:
    • base (the default) searches the base.

    • one searches immediate children.

    • sub searches the sub-tree.

  • filter is the search filter, which is, generally, the sybaseServername. You can leave the search filter blank and set the datasource or Server Name property in the ConnectionString.

  • userdn is the user’s distinguished name (dn). If the LDAP server does not support anonymous login, you can set the user’s dn here, or you can set the DSPrincipal property in the ConnectionString.

  • userpass is the password. If the LDAP server does not support anonymous login, you can set the password here, or you can set the DSPassword property in the ConnectionString.

The URL can contain sybaseServername, or you can set the property Server Name to the service name of the LDAP Sybase server object.

These properties are useful when using Directory Services:

  • DSURL – set to LDAP URL. The default is an empty string.

  • Server – the service name of the LDAP Sybase server object. The default is an empty string.

  • DSPrincipal – the user name to log in to the LDAP server if it is not a part of DSURL and the LDAP server does not allow anonymous access.

  • DSPassword or Directory Service Password – the password to authenticate on the LDAP server if it is not a part of DSURL and the LDAP server does not allow anonymous access.