Open topic with navigation

# KeyUserName

The name of the attribute to search for in the LDAP server.

When you authenticate a user in LDAP, it searches the group and its subdirectories for the user name that you provide in the action. You can specify the group in the Group configuration parameter, or in the Group action parameter in the Security or UserRead action. If IDOL Server finds the specified user name in this attribute, it attempts to authenticate against it with the credentials provided in the action.

Note: If there is more than one user with the specified user name, authentication fails.

If your LDAP server does not allow anonymous binding, you must use BaseDN and BaseDNPassword to specify the credentials of an LDAP user that has permission to perform the search.

If you do not set `KeyUsername`, you must set RDNAttribute to perform LDAP authentication. In this case, IDOL Server does not perform a search, and it can only authenticate users within the Group directory, and not subdirectories.

Type: | String
Default: |
Required: | No
Configuration Section: | `MySecurityRepository`
Example: | `KeyUserName=uid`
See Also: | BaseDN BaseDNPassword Group RDNAttribute UserRead action Group parameter

© 2016 Hewlett Packard Enterprise Development LP | Send documentation feedback to HPE Close We welcome your comments! To open the configured email client on this computer, open an email window. Otherwise, copy the information below to a web mail client, and send this email to AutonomyTPFeedback@hpe.com. Product: Topic Title: Help Topic: Feedback:

_HP_HTML5_bannerTitle.htm