48
OmniView IP 5000 HQ
sections
table of contents
1
3
5
7
9
11
13
15
17
19
2
4
6
8
10
12
14
16
18
20
21
17
seTTInGs – aPPlICaTIOns
notes:
• Users must be members of groups in order to be shown in the
Import Users Active Directory tree. Users belonging to the container
“Users” in the Active Directory do not necessarily belong to any group.
• You can use the Active Directory command “dsquery user” to list
all Active Directory users with their correct Bind DN parameters.
Run “dsquery user” at the command prompt of your Active Directory
Domain Controller.
You can import:
• A group with all its users by selecting the group.
• Some users of a group by expanding the group and then selecting
the desired users.
Once selected, the groups and users appear in the “Selected User
Group/User” area. Press “Save” and a prompt appears explaining
that all current 5000HQ users will be deleted. Press “OK”. The groups
and users appear in the “Users/Groups” section of the OmniView IP
5000HQ, with the words “Users (LDAP mode)” at the top of the page.
After importing users, you must assign their permissions—administrator,
user, or view only. How to assign permissions is explained in the
“Creating Users” section on page 14. By default, all users have user
permission status. (Also, assign their target permissions and allowed
Access Services.)
9 .2 .2 .5 synchronization
Synchronization does two things:
• Keeps the exact group structure maintained on the LDAP servers.
(Whenever a user is added or removed from the LDAP server group,
it will be synchronized with the OmniView IP 5000HQ).
• Removes deleted users. A user that resides in OmniView IP 5000HQ,
but is deleted from the LDAP server, will be removed from
OmniView IP 5000HQ as well.
Where users and/or groups have been added or deleted from the
LDAP database, you can synchronize the local user database with the
LDAP database. There is no need to import new users from the LDAP
database, synchronization does this automatically, provided that the
new user is added to one of the groups imported into the
OmniView IP 5000HQ.
To synchronize:
Click . The local user database is compared to the LDAP
database. Any local user that does not exist on the LDAP server is
noted as deleted. Any new user added to already imported OmniView IP
5000HQ groups in the LDAP database is noted as added.
note:
To add a user to the OmniView IP 5000HQ groups using the
synchronize function, add this user to the imported group in the
LDAP server.
