Previous Topic: Transport Layer Security

Next Topic: How to Modify Attribute Mapping

Attribute Mapping

CA SDM contact record attribute values are synchronized with LDAP user attribute values based on the attribute mapping definitions in the $NX_ROOT/bopcfg/majic/ldap.maj file.

The following excerpt from ldap.maj illustrates mapping. Attribute names in the left column (id) are the CA SDM contact attribute names. The center column (distinguishedName) contains the corresponding LDAP attribute names.

    id                distinguishedName               STRING 512;
last_name          sn,pzLastName                     STRING ;
first_name         givenName,pzFirstName             STRING ;
middle_name     initials,pzMiddleName             STRING ;
userid               uid,sAMAccountName,pzUserName     STRING ;
phone_number    telephoneNumber,pzWorkPhoneNumber STRING ;

If an SREL (a single relationship or foreign key in another database table) exists on CA SDM, the contact attribute value is synchronized with the corresponding LDAP value. If the SREL does not exist, it is not created automatically during LDAP synchronization processing.

Note: By default, attribute mapping is configured for the Microsoft Active Directory LDAP schema. If necessary, you can change the mapping by using a mod file.