Table of Contents

createUsersFromLdapGroup

Description

This timer gets all members from a LDAP group and places them in TIM. It also assigns the given rights to the users found.

Webservice Name

IdentityManager

Webservice Methode

createUsersFromLdapGroup

Parameter

DN-path from the LDAP

The DN-path can be specified where the Timer should search.(siehe Example)


Rights in TIM

Here, the rights can be given that the timer automatically assigns to the given group. If more than one per group rights are given, they must be separated with a comma(“,”).The following values are possible:


IMPORTANT! the right “member” should always be specified!


Limit of users

With the limit, the maximum number of users can be given that the timer retrieves and generates during a single pass. Can be useful with large numbers of users when the LDAP connection is in a timeout.


The offset for the user

If the group is too large to synchronize all users in a single pass, you can be specified using the offset, from which user number of the sync should be started. (see Example)


Example

retrieves 100 User from the DN and gives these users processmanage and member rights
"CN=TIM-Prozessmanager,OU=LDAP-Wiki,DC=tim,DC=local","member,Processmanager","100","0"
retrieves 500 User and gives these users process manager, member und admin rights
"CN=TIM-mighty,OU=LDAP-Wiki,DC=tim,DC=local","processmanager,administrator,member","100","0"

Practical Example

This example shows a practical use of the timer which has been running with the following parameters:

 "CN=TIM-Prozessmanager,OU=LDAP-Wiki,DC=tim,DC=local","member,processmanager","100","0" 





After this, a second timer is created, which has the following parameters:

"CN=TIM-Admin,OU=LDAP-Wiki,DC=tim,DC=local","Administrator","100","0"

In the group TIM-Admin our User “User1” is registered again, that passes through after the Timer looks like this: