04.06.2013 Views

UCS 2.4 - Univention

UCS 2.4 - Univention

UCS 2.4 - Univention

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

4 <strong>Univention</strong> Directory Manager<br />

LDAP<br />

Object class (*)<br />

Object class to which the attribute entered under LDAP mapping belongs. In LDAP scheme def-<br />

initions it is established which LDAP attributes are provided by an LDAP object class. Each LDAP<br />

object which should be extended with an attribute is automatically extended with the LDAP object<br />

class specified here if a value for the extended attribute has been entered by the user.<br />

LDAP mapping (*)<br />

The name of the LDAP attribute where the values of the LDAP object are to be stored. The LDAP<br />

attribute must be included in the specified Object class.<br />

Delete object class<br />

If the value of a extended attribute in <strong>Univention</strong> Directory Manager is deleted, the attribute is removed<br />

from the LDAP object. If no further attributes of the registered object class are used in this LDAP<br />

object, the Objektklasse will also be removed from the LDAP object if this option is activated.<br />

<strong>UCS</strong> LDAP schema for customer extensions<br />

To keep the efforts required for small extensions in LDAP as low as possible, <strong>Univention</strong> Corporate Server<br />

has its own LDAP scheme for customer extensions. The LDAP object class univentionFreeAttributes<br />

can be used for user-defined attributes or extended attributes without restrictions. The LDAP object class<br />

offers 20 freely usable attributes (univentionFreeAttribute1 to univentionFreeAttribute20) and can be<br />

used in connection with any LDAP object (e.g., a user object).<br />

4.6 Policy-controlled Layouts for the Web Front-End of <strong>Univention</strong> Directory<br />

Manager<br />

The layout of <strong>Univention</strong> Directory Manager can be modified by policies in order to allow users a differen-<br />

tiated access to the functions of the <strong>Univention</strong> Directory Manager. The policy type <strong>Univention</strong> Directory<br />

Manager View makes it the possible to pre-define the available <strong>Univention</strong> Directory Manager modules<br />

for the users. Available modules include:<br />

146<br />

• About<br />

Shows information on the installed <strong>UCS</strong> version, the validity period of the <strong>UCS</strong> root certificate of the<br />

domain, and currently valid licences.<br />

• Browse<br />

By activating ’Browse’, the user is permitted direct access to the LDAP (see below under ’LDAP base<br />

DN’).<br />

• Personal settings<br />

Permits the user to define the settings of his user object at his own discretion (see below under ’Self<br />

tabs list’).

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!