HP Intelligent Management Center v5.1 TACACS+ Authentication Manager Administrator Guide

 Device User Group—Device user group to which the LDAP user belongs.

 Policy Name—Name of the LDAP synchronization policy the LDAP user is bound with. Click the

name link of a policy to view its details. For more information about LDAP synchronization

policy details, see "Viewing LDAP synchronization policy details."

 Status in LDAP Server—State of the LDAP user during last synchronization, Existent or

Inexistent. If the user exists on the LDAP server, the field displays Existent. Otherwise the field

displays Inexistent. To learn the current state of an LDAP user, synchronize the user

immediately. For specific procedures, see "Executing an LDAP synchronization policy."

Navigating the bound user list

 Click the Next Page icon to page forward in the bound user list.

 Click the Last Page icon to page forward to the end of the bound user list.

 Click the Previous Page icon to page backward in the bound user list.

 Click the First Page icon to page backward to the front of the bound user list.

Click 8, 15, 50, 100, or 200 on the upper right side of the main pane to configure how many items

per page you want to view.

Querying LDAP users

You can follow the same procedures to query LDAP users in the all bound user list and the bound user list

of a specific synchronization policy. The following information uses the all bound user list as an example.

To query LDAP users in the all bound user list:

1. Click the User tab.

2. Select Device User View > LDAP Users from the navigation tree.

The All Bound User List displays all LDAP users.

3. Enter or select one or multiple of the following query criteria:

 Account Name—Enter the account name of an LDAP user. TAM supports fuzzy matching for this

field. For example, if you enter sam, all LDAP user accounts with names containing sam are

queried.

 Device User Group—Click the Select User Group icon . The Select Device User Group

window appears. Select a group and click OK. Click the Clear icon to clear your selection.

 Status in LDAP Server—Select an LDAP user state from the list. Options include Unknown,

Existent, and Inexistent. TAM queries LDAP users according to the user state during last

synchronization. To query the users based on their current state, synchronize the users first. For

more information, see "Synchronizing LDAP users."

If a field is empty, this field does not serve as a query criterion.

4. Click Query.

All LDAP users matching the query conditions are displayed in the All Bound User List.

To clear the query criteria, click Reset. The All Bound User List displays all LDAP users.

Viewing LDAP user details

You can follow the same procedure to view LDAP user details in the all bound user list and the bound user

list of a specific synchronization policy. The following information uses the all bound user list as an

example.