Table Of Contents

Provisioning Users via a Directory Server

Supported Directory Servers

Synchronizing User Information

Accessing User Information in an Active Directory Server

Accessing User Information in an iPlanet Directory Server

LDAP Information Attributes

Provisioning Users via a Directory Server

---

This appendix describes how you can optionally configure Resource Manager to work with a directory server. Topics in this section include:

•Supported Directory Servers

•Synchronizing User Information

•Accessing User Information in an Active Directory Server

•Accessing User Information in an iPlanet Directory Server

•LDAP Information Attributes

Supported Directory Servers

The Resource Manager supports the following directory servers

•Microsoft Active Directory Server (ADS) 2000

•Microsoft Active Directory Server (ADS) 2003

•iPlanet Directory Server 5.0+

•Sun ONE Directory Server 5.0+

Synchronizing User Information

If an organization uses an external directory server, Resource Manager can synchronize user information with the directory server, thus minimizing user setup and maintenance.

When Resource Manager connects to an external directory server, each user defined in the directory server is included in Resource Manager, along with the associated user type for that user. If no user type is defined, a user is assigned the user type defined in Advanced Settings > Default User Settings, in the User Type field. The default user type setting is Meeting Organizer.

During the organization account creation process, Resource Manager registers the first user (the technical contact), who in most cases, is the administrator who performs the installation. This technical contact is automatically assigned the Organization Administrator user type, with permission to log in and provision the other users. The technical contact cannot be deleted from within Resource Manager and should not be deleted from the directory server.

To synchronize Resource Manager with a directory server, click Update.

---

Caution If the directory server is customized not to use standard schema attributes and class labels, the Resource Manager installation application will not correctly configure the database to synchronize with the directory server.

---

Accessing User Information in an Active Directory Server

This section describes how to access user information in Microsoft Active Directory Server (ADS) 2000 and 2003.

Procedure

---

Step 1 To view information for a user in the host Active Directory Server (ADS), select one of the following paths, depending on the Active Directory version you are using:

–Start > Programs > Administrative Tools > Active Directory Users and Computers

–Start > Settings > Control Panel > Administrative Tools > Active Directory Users and Computers

Step 2 To access the user list, open the User folder.

Step 3 In the user list, right-click the required user and then choose Properties.

Step 4 To view the user ID for the selected user, choose the General tab.

Step 5 To view the login name for the selected user, choose the Account tab.

---

Accessing User Information in an iPlanet Directory Server

This section describes how to access user information in iPlanet Directory Server 5.0+.

Procedure

---

Step 1 To view organization unit information on the host iPlanet Directory Server, choose Start > Programs > iPlanet Server Products > iPlanet Console.

Step 2 When the iPlanet Console interface appears, choose Directory Serverhost > Server Group > Directory Server.

Step 3 Click Open.

Step 4 Choose the Directory tab to view the directory tree.

Step 5 In the upper section of the directory tree, right-click the People icon, and then from the right-click menu choose Properties.

Step 6 To display properties details, in the Properties window, click Advanced.

Step 7 To display the organization unit, choose Show DN.

If users are stored in a sub-level directory, it is possible that the organization unit (ou) has multiple entries (such as ou=resources and ou=people).

Step 8 Copy the entry exactly as shown, from the distinguished name (dn) to the domain name (dc).

For example, if the properties are "ou=resources,ou=people,dc=Cisco,dc=com", then the correct entry for the organization unit is "ou=resources,ou=people".

---

LDAP Information Attributes

This following table details the LDAP information attributes used by Resource Manager.

Table A-1 LDAP Information Attributes 

Identifier	Attribute	Description
1	uid	User identifier
2	email	User email address
3	telephone	User telephone number
4	mobile	User mobile telephone number
5	fax	User fax number
6	cn	Full name of user
7	givenName	Given name of user
8	sn	Surname of user
9	company	User company name
10	branch	Branch
11	department	Department
12	country	Country
13	state	State
14	city	City
15	description	Description
16	zipCode	Zip code
17	address	Address