Skip to content

Commit ac3249d

Browse files
defguard-communitygitbook-bot
authored andcommitted
GITBOOK-385: change request with no subject merged in GitBook
1 parent c6f1303 commit ac3249d

File tree

2 files changed

+8
-5
lines changed

2 files changed

+8
-5
lines changed

enterprise/all-enteprise-features/ldap-and-active-directory-integration/settings-table.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,11 @@ Changing the RDN attribute may cause your users to be re-added to Defguard, caus
3737
* `Username attribute`: The username attribute which will be used to set the username of a Defguard user. The following restrictions apply:
3838
* Only alphanumeric characters except for <kbd>.</kbd>, <kbd>-</kbd> or <kbd>\_</kbd>
3939
* At least 1 and at most 64 characters
40+
41+
{% hint style="danger" %}
42+
To use this feature, your LDAP user entries must posses the "memberOf" attribute (or it's equivalent, defined using the member attribute), which may not be available by default on your LDAP server. This may require enabling an appropriate module.&#x20;
43+
{% endhint %}
44+
4045
* `Limit synchronization to these groups`: limits the synchronization scope to only the members of the selected groups, this works both ways:
4146
* Changes in Defguard will be propagated to LDAP only if a user belongs to a given group in Defguard.
4247
* If the two way synchronization is enabled, only the users belonging to the specified groups will be fetched from the LDAP server.

enterprise/all-enteprise-features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,10 @@ icon: arrow-right-arrow-left
44

55
# Two-way LDAP and Active Directory synchronization
66

7-
{% hint style="warning" %}
8-
This is an alpha feature available in Defguard core v1.3.0 alpha builds and above. It may not be production ready yet and may have some bugs. Report any issues you find on our [GitHub](https://github.com/DefGuard/defguard/issues).
9-
{% endhint %}
10-
117
{% hint style="danger" %}
12-
Make sure to be aware of the mechanisms described in [#authority-and-full-synchronization](two-way-ldap-and-active-directory-synchronization.md#authority-and-full-synchronization "mention")and [#first-synchronization](two-way-ldap-and-active-directory-synchronization.md#first-synchronization "mention") before enabling this feature, as improper use may cause loss of user data.
8+
Make sure to be aware of the mechanisms described in [#authority-and-full-synchronization](two-way-ldap-and-active-directory-synchronization.md#authority-and-full-synchronization "mention") and [#first-synchronization](two-way-ldap-and-active-directory-synchronization.md#first-synchronization "mention") before enabling this feature.\
9+
\
10+
We recommend testing the integration first in a non-production environment, as improper configuration may cause loss of user data.
1311
{% endhint %}
1412

1513
The LDAP synchronization allows for synchronizing users and groups between Defguard and your LDAP server.

0 commit comments

Comments
 (0)