LDAP attribute syntax

This section applies for the StreamStudio web portal.

When configuring the user directories for an application domain, you specify LDAP attributes that will be used in queries against the directory server. You specify these attributes on the Directory tab in the Application Domain Editor.

For example, you can specify attributes for controlling senders or receivers of jobs. You can also specify attributes for translating a user logging into StreamStudio into a qualified distinguished name. The distinguished name together with the password that the StreamStudio user specify are used to authenticate the user in the user directory.

For example, for OpenDS, the following default attributes are suggested (in the Translate name attributes setting) to translate a StreamStudio user into a qualified distinguished name:

uid="%1" || cn="%1"

Where:

•	uid (user ID) and cn (common name) are standardized X.500 attributes.

•	|| is a logical "OR"

•	%1 is a placeholder which will be substituted by the user name that the user specify when logging into StreamStudio.

To be translated into a distinguished name, there must be either a user ID or a common name in the user directory. See the example below.

You can also specify additional attributes. For example, to enable the user to log in also with an email address or a phone number, you can add the email and phone attributes:

uid="%1" || cn="%1" || mail="%1" || phone="%1"

Note:

In order to enhance search performance in the user directory, you should only use attributes that are indexed.

Example 1

Translate name attributes

In this example, the default attributes are used to translate a user logging in to StreamStudio into a qualified distinguished name:

Translate name attributes: uid="%1" || cn="%1"

When a user with the user ID User123 logs on to StreamStudio, the attributes in the query sent to the directory server is as follows:

uid="User123" || cn="user123"

In order for the user to be translated into a qualified distinguished name, there must be either a user ID called User123 or a common name called User123 in the user directory.