Active Directory Global Catalog
When listing users in the Entitlements Manager, some users are listed twice.
Access Manager requires that a user datastore be defined for the local domain as well as for the Global Catalog. The user datastore for the local domain is where local users would be created. It should be noted that when using the Global Catalog, the Entitlements Manger should not be used to manage users. Instead, domain users should be managed externally using Microsoft tools. The user.basedn for the local datastore must be defined, else an error message is generated. This configuration setting should point to a dummy location where no users reside. Users on the local domain will still be visible through the Forest view, provided by the Global Catalog.
For example, create a container in the local domain called CTUSERS.
Point the user datastore for the local datastore to this empty container.
cleartrust.data.ldap.user.basedn cn=CTUSERS, cn=Users,dc=domain,dc=com
Related Articles
Licenses Number of Views Extend an Evaluation License Number of Views Uninstall a License Number of Views Check License Status Number of Views View Installed Licenses Number of Views
Trending Articles
Deploy an Identity Router Virtual Machine in Microsoft Azure How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Offline Days Are Not Downloaded for RSA MFA Agent 2.x After Enabling Offline Authentication Policy in Authentication Manag… Failed to generate QR Code error when trying to activate software token using QR code in RSA Authentication Manager 8.x Se…
