Filter
Top Products
Integrations with Other Systems
Polycom, Inc. 166
Domain Search
This search queries LDAP.
The system runs this query only when it restarts (if already integrated with the Active Directory) and when
you click the Update button on the Microsoft Active Directory page.
● Base: CN=Configuration,DC=dma,DC=eng,DC=local
The base variable depends on the forest root DN (the distinguished name of the Active Directory
forest root domain). See Active Directory Integration Report on page 409.
● Filter: (&(objectCategory=crossRef)(systemFlags=3))
● Indexes used: idx_objectCategory:11:N
The search used these indexes in our testing environment, using a standard AD configuration (no
indexes added). Results may be different for a different configuration.
● Attributes returned: cn, dnsRoot, nCName
Service Account Search
This search queries the global catalog. In a standard AD configuration, all the filter attributes and attributes
returned are replicated to the global catalog.
The system runs this query only when you click the Update button on the Microsoft Active Directory page.
It validates the service account ID.
● Base: <empty>
The base variable depends on the Base DN setting on the Microsoft Active Directory page. If it’s
set to the default, All Domains, the base variable is empty, as shown. Otherwise, the base variable is
the same as Base DN. See Understanding Base DN on page 160.
● Filter: (&(objectCategory=person)(UserAccountControl:
1.2.840.113556.1.4.803:=512)(sAMAccountName=*)
(&(!(userAccountControl:1.2.840.113556.1.4.803:=2))
(sAMAccountName=<userID>)))
The first filter variable depends on the User LDAP filter setting. See Microsoft Active Directory
®
Integration on page 152. The second variable depends on the value entered in the Service account
ID field on the Microsoft Active Directory page. See Microsoft Active Directory
®
Integration on
page 152.
● Index used: idx_objectCategory:32561:N
The search used this index in our testing environment, using a standard AD configuration (no indexes
added). Results may be different for a different configuration, especially a different User LDAP filter
setting.
● Attributes returned: sAMAccountName, userAccountControl, givenName, sn
See also:
Microsoft Active Directory
®
Integration on page 152
Microsoft Active Directory Page on page 153
Active Directory Integration Procedure on page 157
Understanding Base DN on page 160