• There is no inherent security in LDAP. If you want to implement security, you must create a custom connector.
LDAP Classes and Attributes
Exalead CloudView allows you to select the attributes of every class to display in the search results. For example, when you configure an LDAP class person, you also select the attributes to be crawled: name, telephone, address, and memberOf.
Likewise, when you configure an LDAP class group, you can also select the attributes to be crawled such as: name, administrator, manager, and chargeNumber.
A search for a person in this LDAP directory provides the following hit content:
A search for a group in this LDAP directory provides the following hit content:
Now let us see a second scenario from the same LDAP directory that includes a reference. As shown below, an attribute may reference another class: memberOf that references group. In this case, you also select the attributes that are to be crawled from group: name, administror, and manager. When searching for a person, we are not interested in the charge number for their group, so this attribute is not to be indexed.
A search for a person in this LDAP directory provides the following search result content:
Add LDAP References
To add LDAP references in Exalead CloudView, you must configure LDAP classes in the administration interface.
In this example, group.1 is a copy of group, but without the attribute chargeNumber. This is the class that memberOf will reference.
Then make a reference in class person, attribute memberOf to class group.1.
Classes to Index
To follow the above example, only the root classes must have the index parameter defined.
To follow the above example, only the root classes must have the index parameter defined. Classes that are only referenced must not have the index parameter defined.
Referencing a class can induce a lot of requests to the LDAP server. To avoid this, you can select Prefetch and Cache.
• Prefetch allows the connector to get all the class entries before indexing time with one big request, and cache it once and for all. No more requests will be required for this class.
• Cache allows the connector to cache the class entries during indexing time to avoid multiple requests.
