Available actions:

Create LDAP connector

Create resource for LDAP AD database.

Create AAD connector

Create resource for Azure AD database.


Create connector for LDAP

Admin Console / Tenant configuration / Connectors / New connector

parameter

description

value

Description

identification of the connector

e.g. Tenant Connector

Address

ldap address


Port

ldap port


ldaps

checkbox

checked

Failover address

ldap failover address


Failover port

ldap failover port


ldaps

checkbox

checked

username

service account


password

service account


ServerSet implementation class

How LDAP connector works with multiple addresses.

options:

  • FAILOVER - primary address is used and secodary as fallback what connection to primary failed
  • FEWEST_CONNECTIONS - new connection is created to address which was used fewest
  • FAST_CONNECT - connector will create connection to both addresses and keep the fastest
  • ROUND_ROBIN - split connection to all addresses


use LDAP connections pool

Enable pooling - connection pool will be use to communicate with LDAP.

Note: Pooling and ServerSet implementation:

  • FAILOVER - defaulf implementation
  • FEWEST CONNECTION - can be use with pool
  • FAST_CONNECT - does not make much sense with pool
  • ROUND_ROBIN - can be use with pool

checked

Connection pool min size:

Initial pool size - minimal number of connections in pool (relevant only when connections pools is enabled)

Some suggested values for pool size:

0 - 1000 users - init: 10

1001 - 10000 - init: 10

  • Note: Proper setting required more information regarding complexity of LDAP structure, user behavior etc.

10

Connection pool max size:

Max pool size - maximal number of connections in pool (relevant only when connections pools is enabled)

Some suggested values for pool size:

0 - 1000 users - max 20

1001 - 10000 - max 50

  • Note: Proper setting required more information regarding complexity of LDAP structure, user behavior etc.

20

Check connection age on release

Pool will check connection age after releasing connnection, should be used only with Max connection age

checked

Max connection age (millis):

Max age of connections in millisecond, connection pool will destroy connection when it reach its lifetime

  • Default: connection has infinity lifetime

50000

Create connection if necessary

In case that all connections are in use, connection pool creates extra temporary connection

  • Default: no extra connection is created, processing thread must wait for available connection.

checked

Minimal disconnect interval after connection is closed because of age (millis):

Interval between connection was retired and creation of new one

0

Health check interval (millis):

Health check interval

  • default 60 seconds

60

Pooled scheme timeout:

How long pool is caching LDAP schema. In standard environment schema is not changed at all, so it is not neccesary to set this value

  • Default: timeout is infinity

86400000

Connection timeout:

Timeout for connection to be estabilished (in milliseconds)

2000

LDAP Extended operation response timeout: 

Timeout for extended operation like transitive groups membership search (in milliseconds).

5000

LDAP Operation response timeout:

Timeout for standard ldap queries.

2000


Create connector for Azure AD

Admin Console / Tenant configuration / Connectors / New connector

parameter

description

value

Type

Types of connectors.

Options:

  • LDAP
  • AAD

AAD

Description

identification of the connector

e.g. Tenant Connector

Azure tenant ID


***

Client ID


***

Client Secret


***


<< Back