Selecting LDAP user attributes to Synchronize with Harvest
Article ID: 69423
Updated On:
Products
Issue/Introduction
Once Harvest is set up to use external authentication with LDAP, user attributes cannot be changed from the Harvest Administrator Tool. Instead, Harvest will update/synchronize values that you have mapped from the LDAP server into the Harvest database for each user. You can choose which attributes are mapped by adding options to your HServer.arg file.
Environment
Harvest Software Change Manager all versions and platforms
Resolution
The parameters you can use to collect information about Harvest users so that it is available to CA Harvest SCM are:
- -ldapattrusrname=
- -ldapattrusrfullname=
- -ldapattrusrphone=
- -ldapattrusrphoneext=
- -ldapattrusrfax=
- -ldapattrusremail=
- -ldapattrusrunixuid=
- -ldapattrusrunixgid=
- -ldapattrusrunixhomedir=
- -ldapattrusrunixshell=
For each of the attributes you want to use in Harvest, you include the LDAP attr parameter in your Hserver.arg file and set it to its corresponding attribute within the LDAP server, for example:
-ldapattrusrfullname=cn
Additional Information
More information about these parameters can be found in the Implementation Guide: CA Harvest SCM Installation Guide - Configure Broker and Server (the section titled OpenLDAP External Authentication Connection Options (Servers and Remote Agents))
Feedback
