This timer gets all members from a LDAP group and places them in TIM. It also assigns the given rights to the users found.
IdentityManager
createUsersFromLdapGroup
The DN-path can be specified where the Timer should search.(siehe Example)
Here, the rights can be given that the timer automatically assigns to the given group. If more than one per group rights are given, they must be separated with a comma(“,”).The following values are possible:
IMPORTANT! the right “member” should always be specified!
With the limit, the maximum number of users can be given that the timer retrieves and generates during a single pass. Can be useful with large numbers of users when the LDAP connection is in a timeout.
If the group is too large to synchronize all users in a single pass, you can be specified using the offset, from which user number of the sync should be started. (see Example)
"CN=TIM-Prozessmanager,OU=LDAP-Wiki,DC=tim,DC=local","member,Processmanager","100","0"
"CN=TIM-mighty,OU=LDAP-Wiki,DC=tim,DC=local","processmanager,administrator,member","100","0"
This example shows a practical use of the timer which has been running with the following parameters:
"CN=TIM-Prozessmanager,OU=LDAP-Wiki,DC=tim,DC=local","member,processmanager","100","0"
After this, a second timer is created, which has the following parameters:
"CN=TIM-Admin,OU=LDAP-Wiki,DC=tim,DC=local","Administrator","100","0"
In the group TIM-Admin our User “User1” is registered again, that passes through after the Timer looks like this: