About The System's Directory Queries - Polycom DMA 7000 Operation Manual

About the System's Directory Queries

About the System's Directory Queries
Polycom, Inc.
The Polycom DMA system uses the following subtree scope LDAP queries. In
a standard AD configuration, all these queries use indexes.
• User Search
• Group Search
• Global Group Membership Search
• Attribute Replication Search
• Configurable Attribute Domain Search
• Domain Search
• Service Account Search
The system runs the first three queries every time it creates or updates its
cache:
• When you click Update on the Enterprise directory page
• When the system restarts (if integrated with the enterprise directory)
• At the scheduled daily cache refresh time
The elements in italics are examples. The actual values of these variables
depend on your configuration.
User Search
This search queries the global catalog. In a standard AD configuration, all the
filter attributes and attributes returned are replicated to the global catalog.
Base: <empty>
•
The base variable depends on the Base DN setting on the Enterprise
Directory page. If it's set to the default, All Domains, the base variable is
empty, as shown. Otherwise, the base variable is the same as Base DN. See
"Understanding Base DN"
Filter: (&(objectCategory=person)(UserAccountControl:
•
1.2.840.113556.1.4.803:=512)(sAMAccountName=*)
(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
The filter variable depends on the User LDAP filter setting. See
"Enterprise Directory"
Index used: idx_objectCategory:32561:N
•
The search used this index in our testing environment, using a standard
AD configuration (no indexes added). Results may be different for a
different configuration, especially a different User LDAP filter setting.
on page 109.
on page 101.
Enterprise Directory Integration
113