LDAP Connector Guide > Mappings with LDAP Connector > LDAP Objects in Mappings
  

LDAP Objects in Mappings

When you create a mapping, you can configure a Source or Target transformation to represent an LDAP object.
After you configure a mapping, deploy the mapping in a mapping configuration task. If you parameterize the connection, object, or query in a mapping, you must specify the parameterized values when you create the Mapping Configuration task.

LDAP Sources in Mappings

To read data from LDAP directory server, configure an LDAP object as the Source transformation in a mapping. You can configure a Source transformation to represent a single LDAP source.
Specify the name and description of the LDAP source. Configure the source and advanced properties for the source object.
The following table describes the LDAP source properties that you can configure in a Source transformation:
Source Property
Description
Connection
Name of the source connection or create a connection parameter.
If you choose to create a parameter for the connection, provide the connection type as Toolkit Application.
Source Type
Type of source object. Select Single or Parameter as the source type.
Object
Name of the source object. Select the source object for the task.
Parameter
The parameter for the source object. Create or select the parameter for the source object.
Note: The parameter property appears only if you select parameter as the source type.
The following table describes the LDAP query properties that you can configure in a Source transformation:
Source Property
Description
Query Options
Filter value in a read operation. Click Configure to add conditions to filter records and reduce the number of rows that the Secure Agent reads from the source.
You can specify the following filter conditions:
  • - Not parameterized. Use a basic filter to specify the object, field, operator, and value to select specific records.
  • - Completely parameterized. Use a parameter to specify the filter query.
  • - Advanced. Use an advanced filter to define a more complex filter condition that uses the LDAP query format.
The following table describes the LDAP source advanced properties that you can configure in a Source transformation:
Property
Description
Page Size
Size of the page set to retrieve the maximum number of entries for each request. 0 indicates that all the entries are retrieved in one request.
Default is 0.
Parent DN
Required. The DN in an LDAP directory server namespace from where you want to fetch data.
For example, you can specify the following DN to read data about people from Informatica: ou=people, o= infa.com
Search Level
Searches for entries while reading from the LDAP directory server. You can select one of the following search options:
  • - One-level. Retrieves immediate children of a base object, but excludes the base object.
  • - Subtree. Retrieves all objects subordinate to the base object including the base object.
Default is one-level.
Use Object Category Filter
Fetches entries based on the object category value.
When disabled, the Secure Agent fetches the entries based on the object class value. For example, when you disable the filter, the user object class fetches the entries from both the user and computer because computer is derived from the user object class.
To fetch only the user entry, enable the object category filter as both user and computer have different object category values.
CDC
Captures the changed data in Active Directory based on the time stamp or the last extracted point. Select CDC and configure the following options to capture changed data:
  • - Specify the start time and end time to capture changed data for that period.
  • - Specify only the start time to capture changed data until the last change.
  • - Do not specify a start time and end time to capture data from the last recorded update sequence number (USN).
  • - Specify only the end time to capture changes from the beginning till the specified end time.
  • - Reset the value of the CDC to capture changes by ignoring the values stored in the CDC file.
CDC Start Time
The start time from when you want the Secure Agent to capture the changed data.
If you select CDC and specify a start time, but do not specify an end time, the Secure Agent captures the changed data until the last change.
Use the following sample format to specify the start time: 20150312081001.0Z
CDC End Time
The end time until when you want the Secure Agent to capture the changed data. When you specify only the end time, the Secure Agent captures the changed data from the beginning until the specified end time.
Use the following sample format to specify the end time: 2050412081001.0Z
CDC File Path
Absolute path of the file that stores the change number for the last read changed entry.
Reset CDC
Ignores the CDC change number stored in the CDC file. After the reset, the Secure Agent captures the changes made to the LDAP directory server from the beginning.

LDAP Targets in Mappings

In a mapping, you can configure a Target transformation to represent a single LDAP target. You can also create an LDAP target at run-time based on the input fields.
When you use an LDAP target object, select an LDAP object as the target.
The following table describes the LDAP target properties that you can configure in a Target transformation:
Target Property
Description
Connection
Name of the target connection or create a connection parameter.
If you choose to create a parameter for the connection, provide the connection type as Toolkit Application.
Target Type
Type of target object. Select Single Object or Parameter.
Object
The target object for the task. Select the target object.
Parameter
The parameter for the target object. Create or select the parameter for the target object.
Note: The parameter property appears only if you select parameter as the target type.
Operation
The target operation. Select the target operation. You can only insert, update, or delete data in an LDAP target.
The following table describes the LDAP target advanced properties that you can configure in a Target transformation:
Advanced Target Property
Description
ReplaceAll
Replaces the existing values in LDAP server when you use the update operation to write data.
To delete multivalued attributes, you must enable this option and pass a null value.
Update Strategy
Updates the rows in the LDAP server based on the following update strategy options you set:
  • - Update as Update. Updates all rows flagged for update.
  • - Update else Insert. Updates all rows flagged for update if they exist in the target and then inserts any remaining rows marked for insert.
Default is Update as Update.
KeyColumn
Required with the parent DN to write data to LDAP server.
Select the key column for the entry you want to create. For example, the key column for a user is cn.
Note: You cannot update a key column because LDAP Connector does not support updating the relative distinguished name (RDN) of the entry.
Success File Directory
Not applicable.
Error File Directory
Not applicable.

LDAP Lookups in Mappings

When you configure field mappings in a mapping, you can create a lookup to an LDAP object.
When you use an LDAP object as a lookup, you must specify the parent DN.