[OPENAM-14262] Active Directory Data Store configuration of LDAP User & Groups Container Value - can be blank Created: 16/Jan/19  Updated: 18/Mar/19  Resolved: 05/Feb/19

Status: Resolved
Project: OpenAM
Component/s: documentation
Affects Version/s: 11.0.3, 12.0.4, 13.0.0, 13.5.2, 14.0.0, 14.5.1, 5.5.1, 6.5.0,
Fix Version/s: 14.0.0, 14.1.0,, 6.5.1, 5.5.2, 7.0.0

Type: Bug Priority: Major
Reporter: David Bate Assignee: Chris Lee
Resolution: Fixed Votes: 0
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Rank: 1|hzxhgn:
Sprint: 2019.2 - AM Docs - Hmm
Story Points: 1
Needs backport:
Support Ticket IDs:
Needs QA verification:
Functional tests:
Are the reproduction steps defined?:
Yes and I used the same an in the description


Docs for the Active Directory DataStore configuration , should explain that the LDAP People and Group Container value field can be blank. If you put a value in the field, it will force AM to look in that specific container for users and/or groups. But if you leave the LDAP People Container Value and LDAP Group Container Value blank, it will list ALL users and groups in AD.

Current docs show this:

LDAP People Container Value
RDN attribute value of the LDAP base DN which contains user profiles.

ssoadm attribute: sun-idrepo-ldapv3-config-people-container-value

Default: users


LDAP Groups Container Value
RDN attribute value of the LDAP base DN which contains group profiles.

ssoadm attribute: sun-idrepo-ldapv3-config-group-container-value

Default: users

These do not explain what happens if there is no value, or that it can even be blank.

Comment by Chris Lee [ 29/Jan/19 ]

Hi David Bate - does this ONLY apply to Active Directory, or does it apply to this property on the other stores such as DJ, Tivoli etc? Cheers, Chris


Comment by Chris Lee [ 05/Feb/19 ]

Clarified what happens if the value is blank, and back ported to versions likely to get a doc re-release (back to AM 5).

Generated at Tue Mar 02 13:47:37 UTC 2021 using Jira 7.13.12#713012-sha1:6e07c38070d5191bbf7353952ed38f111754533a.