If this attribute is not set and a user is renamed in the LDAP server, Crowd will not be able to track the user's identity, and will delete the user with the old name and create a new user with the new name. Crowd will synchronize user renames made in the LDAP server, provided that the User Unique Identifier Attribute is set in the 'Configuration' tab.If you don't select this setting, Crowd will use the members attribute on the group ('member' by default) for the search. If you select the Use 'memberOf for Group Membership setting on the 'Connector' tab, Crowd will use the 'memberOf' attribute when it retrieves the list of groups a users belongs to, which will result in a more efficient retrieval.If you select the Use the User Membership setting on the 'Connector' tab, Crowd will use the group membership attribute on the user when it retrieves the members of a given group, which will result in a more efficient retrieval.When this option is enabled, only local groups can be created and updated, while groups synchronized from the remote directory cannot be locally modified. This makes it possible to augment the group structure with new groups even with a read-only LDAP server. Memberships of local groups are also stored locally. If you select the Manage Groups Locally setting on the 'Connector' tab (available only if you've selected the Cache Enabled check box), new groups are created and updated in the Crowd database and not propagated to the LDAP server.For more information, see Configuring Caching for an LDAP Directory.

We recommend you leave this setting selected. By default, the Cache Enabled setting on the 'Details' tab is selected.Complete the configuration information required on each of the tabs to finish setting up the connector and click.In the top navigation bar, click Directories.Log in to the Crowd Administration Console.Sun Directory Server Enterprise Edition (DSEE)īefore you begin configuring the directory, check for any directory-specific notes that affect the directory type you're using.

Best ui browser for ldap