Cisco Systems 5.2.x LDAP Concepts

6-14

UserGuide for Cisc o Digital Media Manager 5.2.x

OL-15762-03

Chapter6 Authentication and Federated Identity

Concepts

We recommend that you synchronize your LDAP bookmarks periodically. Synchronization ensures that

user and group membership associations are current and correct.

Related Topics

•Manage LDAP Attributes, page6-26

LDAP Concepts

•Understand LDAP Attributes, page6-15

•Guidelines for LDAP Filters, page 6-15

Sync

Type Best Practices

Initial The Initial option is CPU-intensive for your DMM appliance and might lower performance

temporarily. We recommend that you use it during off-peak hours only.

Update We recommend that you use the Update option whenever:

•A new user account in Active Directory should have login access to DMM or

Show and Share.

•User attributes1 change in Active Directory for a user account in DMM or

Show and Share.

•A user account is disabled in ActiveDirectory and should be deleted from DMM

and Show and Share.

Overwrite Note The Overwrite option is CPU-intensive for your DMM appliance and might lower its

performance temporarily. We recommend that you use this option during off-peak hours only.

•After a user account is deleted from Active Directory, this option deletes the

corresponding user account from DMM and Showand Share.

•After a user account is associated to a new first name, last name, or username, this

option overwrites the outdated user account attributes.

Delete

Caution The Delete option is destructive by design. We advise that you use it sparingly and with great

caution. Among other effects, your deletion of an LDAP bookmark can affect user access to videos

in Show and Share.

Note Typically, the deletion process takes about 1minute to finish. However, when there are more than

50,000 users in the Active Directory database, this process might run in the background and take about

30 minutes to finish. In this case, the user interface in DMS-Admin can show that a bookmark was deleted

even though the actual process has not finished. If you observe this behavior, simply allow 30minutes for

the operation to finish.

1. Attributes that you entered on the Manage Attributes property sheet in DMS-Admin.