Synchronization of cron task parameters for application server security

You must configure the parameters for the synchronization cron tasks LDAPSYNC and VMMSYNC. The LDAPSYNC and VMMSYNC cron tasks are required for security in the application server.

The table describes the parameters that you configure for the LDAPSYNC synchronization cron task.
Table 1. Parameters for LDAPSYNC synchronization cron task
Parameter Description
Credential LDAP credentials
GroupMapping The GROUP XML that the LDAP task uses
Host LDAP connection host
Port LDAP connection port
Principal LDAP principal
SSLEnabled LDAP connection secure sockets layer (SSL) enabled
SynchAdapter LDAP synchronization adapter
SynchParameter Parameter name, value pairs are delimited by a comma
UserMapping The USER XML that the LDAP task uses
The table describes the parameters that you configure for the VMMSYNC synchronization cron task.
Table 2. Parameters for VMMSYNC synchronization cron task
Parameter Description
ChangePolling Virtual Member Manager (VMM) parameter for incremental synchronization
Credential VMM admin credentials
GroupMapping The USER XML that the VMM task uses
GroupSearchAttribute VMM search attribute to query group records
Principal VMM admin principal
SynchAdapter VMM synchronization adapter
UserMapping The USER XML that the VMM task uses
UserSearchAttribute VMM search attribute to query user records
The LDAP directory server maintains an attribute list for each user or group. Each attribute has an associated data type, which you can query the server to see. The LDAPSYNC cron task and VMMSYNC cron task only support string or character data retrieval from the LDAP directory server.

The data mappings in the LDAPSYNC cron task and VMMSYNC cron task parameters map LDAP attributes to system table columns. For the LDAPSYNC cron task to create a database record, all of the required columns must contain data. If all of the required column data cannot be obtained from the LDAP directory server, you must specify default values. To specify default values for columns, the value must be enclosed inside brackets; for example, {ABC} specifies the value ABC in the column. The value is case-sensitive.

The synchronization task also supports special substitute values to generate unique IDs and system dates. To generate a unique ID for a column, use the notation {:uniqueid}; to generate system date, use the notation {:sysdate}.



Feedback