기술 자료

Unity Version Control

LDAP authentication

Learn how Unity Version Control On-Prem authenticates users against an LDAP server, and find the LDAP settings you can configure.
읽는 시간 1분최근 업데이트: 12시간 전

Use Lightweight Directory Access Protocol (LDAP) authentication to authenticate Unity Version Control (UVCS) users against any LDAP server. For example, you can use a Sun ONE or iPlanet LDAP server.

How LDAP authentication works

In LDAP mode, UVCS works as follows:
  • The server gets the user list from the LDAP server, using a specified user and password.
  • The server builds the security identifier (SEID) with the ID that the LDAP mechanism uses.
LDAP mode works in mixed Windows and Unix environments. For example, you can connect UVCS to an Active Directory server from a Unix machine, where the integrated Active Directory mode isn't available.

LDAP settings

You can configure the following settings in the
server.conf
file:

Setting

Purpose and default

Example

LdapTimeoutSeconds
LDAP request timeout in seconds.
<LdapTimeoutSeconds>10</LdapTimeoutSeconds>
LdapTokenExpirationTimeSpan
LDAP token expiration time in the
[d.]hh:mm:ss
format. The default time is one hour.
<LdapTokenExpirationTimeSpan>05:00:00</LdapTokenExpirationTimeSpan>

Override the LDAP user filter

중요
The user filter override is an advanced feature. Before you use it, contact Unity Support.
If your LDAP setup isn't compatible with the default UVCS user search filters, you can replace the filter with your own.
To specify a filter override, add the
MemberNameFilterOverride
setting to the
server.conf
file:
<LdapSettings> <MemberNameFilterOverride>_user_filter_</MemberNameFilterOverride></LdapSettings>
For example, LDAP setups without the UID attribute can use the filter
(|(sAMAccountName={user})(cn={user}))
.

Additional resources