Cisco Systems 5.2.x manual User Exclusion FAQs, Server uses the samAccountName attribute name

Chapter 6 Authentication and Federated Identity

Reference

User Exclusion FAQs

Q.Can I block Cisco DMS access to one particular Active Directory user account, when it is among the matched results for an otherwise useful LDAP filter?

A.Yes. Extend your query to include a logical NOT (!) operator for an attribute whose value is unique to this user. This example uses the LDAP “samAccountName” attribute name, which DMM uses by default to populate the corresponding login name for DMM. However, if your Active Directory server uses any other attribute name than “samAccountName” for this purpose, you must update the example syntax accordingly when you extend your query.

(&(currentFilter)(samAccountName!=username-to-be-excluded))

Tip	Information on the Manage Attributes property sheet in DMS-Admin confirms whether your Active Directory
	server uses the “samAccountName” attribute name.

	User Guide for Cisco Digital Media Manager 5.2.x
OL-15762-03		6-43