Only import active LDAP users into Documentum 5.3

I am on CS 5.3 SP6 and have sync'ed the users in my repository with all the Active Directory users via the job dm_LDAPSynchronization. However, this has synchronized inactive AD users into my repository, where I only want the active ones.

How do I filter this so only active AD users are sync'ed with the repository? Is there a parameter/argument I can give to the dm_LDAPSynchronization job or the dm_LDAPSynchronization method?

Or do I have to modify the properties of the LDAP object under User Management/LDAP in DA? If so, which property and what value should I set it to?

Find more posts tagged with

Comments

mszurap

You should modify LDAP config object, append a filter string to the person search filter input. The property name (on which you must filter) depends on your Directory server type, look it up with a free LDAP browser tool (Google is your friend).

Derrick

I used the following as the filter string for person and group:

!(userAccountControl:1.2.840.113556.1.4.803:=2)

Seems to work.

Derrick

Use the below as the filter string:

!(userAccountControl:1.2.840.113556.1.4.803:=2)