UCS 2.4 - Univention

4 Univention Directory Manager
TrueFalseUpper corresponds to the OpenLDAP boolean values TRUE and FALSE. Additionally, it is
possible to enter the name of a Univention Directory Manager syntax definition here. These definitions
will be explained below.
LDAP mapping (*)
The name of the attribute where the values of the LDAP object are to be stored in. The attribute has
to be included in the schema definition of the stated object class.
Multivalue
Specifies whether a single value or several values can be stored in the attribute. Permitted values
to be entered are 1 for activated and 0 (default) for deactivated. The schema definition of the LDAP
attribute specifies whether one or several instances of the attribute may be used in one LDAP object.
Default value
If a preset value is defined here, newly created objects will be initialised with this value. Existing
LDAP objects remain unchanged.
Univention Directory Manager syntax definitions The extended Univention Directory Manager syntax
definitions make it possible to establish the permitted values for an attribute via an LDAP search. Moreover,
user-defined attributes can be created the values of which are displayed for information purposes, but not
stored, as a list at a foreign object (see, for example, the Referencing objects tab in chapter 4.5.11.2).
The syntax definitions can be created via the LDAP browser of the Univention Directory Manager beneath
the container cn=univention.
For creating a new syntax definition, a new object of the type Settings: Syntax Definition is to be created
in the desired container. In the subsequent dialogue, the following values are to be entered:
140
’General’ tab
Syntax name (*)
The unique name of the syntax definition.
Short description
An optional description of the syntax definition.
LDAP search filter (*)
This search filter is used for selecting the objects which define the set of permitted values.
Example:
(&(objectClass=univentionHost)(cn=a*))
sucht alle Rechner"=Objekte, deren Name mit ’a’ beginnt.