Map domain attributes

Logon

Attribute that contains the user login used for authentication and as base identifier in job accounting.

Email

Attribute that contains the e-mail of each user. Used for alerts via email, reporting and e-mail functions embedded modules. It can also be used for access to the portal 360.

Full Name

Attribute that contains the display name for each user. Used in reports, system messages and presentation clients modules. If not set, the login will be used as full name.

Organizational Unit Name

Attribute that contains the indication of where the name of the organizational units of the domain will be searched. Used to mount the tree filter screen.

OrganizacionalUnitObjectClass

Attribute that identifies what type of domain object is identified as an organizational unit. Used to mount the tree filter screen and to define what kind of object is identified as account when the sync accounts is by organizational unit. Multivalued field where the values must be separated by a semicolon.

UserObjectClass

Attribute that identifies what type of domain object will be identified as user, when a sync is performed. Multivalued field where the values must be separated by a semicolon.

Account Name

Attribute that contains the account name whether syncing account is selected. Used to assign print and copy jobs, report filters, and management settings.

Group Name

Attribute that contains the group name whether syncing group is selected. Used for quotas assignment, credentials, policies and report filters.

GroupObjectClass

Attribute that identifies what type of domain object will be identified as group whether syncing group is selected. Multivalued field where the values must be separated by a semicolon.

UserGroupsMemberships

It indicates which user attribute is used to identify the relationship between the user and the groups he belongs, whether syncing group is selected.

Physical Identifier

Attribute that contains the value of the physical identifier of users. Used for authentication printing equipment and card readers, when the environment has NDD Print Releaser. Card codes must contain only alphanumeric characters, otherwise the code will be ignored.

PIN

Attribute that contains the users PIN code. Used for authentication printing equipment, when the environment has NDD Print Releaser.

Secure PIN

Attribute that contains the users secure PIN, thus it is necessary that the user has PIN to be synchronized. Used with the PIN or card for authentication printing equipment installed, when the environment has NDD Print Releaser.

Account Code

Attribute that contains the account code, when the account synchronization is selected. If the accounts are configured to synchronize using organizational units, the code becomes mandatory information, by default the NDD Print Host performs the mapping of the ObjectGUID attribute.

AccountsSearchFilter

It maps the LDAP filter that will be used to search the accounts on the domain controller.

• If the sync accounts is set to organizational units, the value of the "OrganizacionalUnitObjectClass" will be ignored.

• If the sync accounts is set to user, the "AccountsSearchFilter" property should contain the same value of "UsersSearchFilter", used to search users.

💡 EXAMPLE

Example when the sync accounts is set to organizational units:

AccountsSearchFilter: (& (ObjectClass = organizationalUnit) (or = level *))

Example when the sync accounts is set to user:

AccountsSearchFilter: (& (objectClass = user) (mail = *))

UsersSearchFilter

It maps the LDAP filter used to search users on the domain controller. When filled in, the value of the "UserObjectClass" will be ignored.

💡 EXAMPLE

UsersSearchFilter: (&(ObjectClass=user)(mail=*@domain1))

GroupsSearchFilter

It maps the LDAP filter used to search groups on the domain controller. When filled in, the value of the "GroupObjectClass" will be ignored.

💡 EXAMPLE

GroupsSearchFilter: (&(ObjectClass=group)(name=Quotas*))

ScanDirectory

Attributed containing the directory used by the embedded modules to store scanned files by the authenticated user.