Crowd 2.1 : Using Naive DN Matching
This page last changed on Nov 30, 2010 by smaddox.
When configuring an LDAP directory connector in Crowd, you can turn 'naive DN matching' on or off. A 'DN' is a distinguished name. Naive DN matching is also known as 'relaxed DN standardisation'. This page gives some background to the setting of this option. Crowd needs to compare DNs (distinguished names) to check a number of things, such as whether a user is a member of a group. Some directories guarantee that DNs will always be in a standard format, and some return slight variants with changes such as extra whitespace. If we know that, in a specific directory, DNs are case insensitive and are always returned in a compact format (that is, the separators are commas without spaces) then we can convert both the attribute names and values to lower case and just do a direct string comparison.
Effect of Turning Naive DN Matching On or Off
Default Settings in CrowdCrowd ships with the following default settings, as determined by the characteristics of each directory type.
RELATED TOPICS |
![]() |
Document generated by Confluence on Nov 30, 2010 23:53 |