LDAP help

[Guest]

I've been setting up LDAP to grab user information from AD for my Aficio MP C6501, and I realized that my company structure has put users in a top level OU and within that OU there's a nested OU called Retired Accounts which has all of the disabled accounts. Is there anyway to have that nested OU exempt from the LDAP query?


As far as I know, I have to use the structure: DC=domain,DC=com,ou=home

[Llama God]

Re: LDAP help

Give this a try:

Softerra LDAP Browser.rar

Or, for a simpler result, try this:

GetMyDN.exe

[kkitagawa]

Re: LDAP help

Give this a try:

Softerra LDAP Browser.rar

Or, for a simpler result, try this:

GetMyDN.exe

Not exactly what I'm looking for, but thanks.

I need a way to exclude a nested OU from queries happening on my Ricoh scanner

[Llama God]

Re: LDAP help

Sorry, I misunderstood.

As far as I'm aware, and my LDAP knowledge isn't great by any stretch of the imagination, you can only point the copier at the OU and there's no way to exclude certain information from that.

Wouldn't it be easier to move the old users out of that OU? If they're no longer required, why do they have to be in there?

[kkitagawa]

Re: LDAP help

Good idea, I will have to talk to my manager about allowing that.

Thanks for the help.

[Llama God]

Re: LDAP help

I know that this may sound like a daft question, but how many users are you talking about?

[kkitagawa]

Re: LDAP help

There are about 600+ users under the main OU and about 60 of which are in the retired accounts nested OU

[Llama God]

Re: LDAP help

Yes, that is a lot of users.

One word of caution then, a lot of the machines can only handle up to 500 users as standard, you may need an option to take it up to 1000. The machines with the new architecture all come with 1000 as standard, I believe.

[KenB]

Re: LDAP help

If you are putting users in the address book of the machine, LlamaGod is right; there are limits.

However, if you want to have the user look up email addresses each time they go to scan, there are no limits, as no data is stored on the machine.

The bigger the enterprise, the more valuable that becomes, as this way you aren't constantly trying to jockey names and addresses around on the machine, as it is all taken care of by AD / LDAP.

[Llama God]

Re: LDAP help

Doesn't it add an address book entry during each lookup to speed things up?

[TheOwl]

Re: LDAP help

Definately move that OU out of the Users OU because when you point to a specific OU with your LDAP settings, the machine is then able to look at all nested OU's underneath it.

On the other hand though, you could created another OU called Active Users and move all the active users into that OU and point your copier at that.

Remember that when you are pointing a machine at a specific OU, start at the OU or CN (container) and move up.

OU=Active Users,OU=Users,DC=domain,DC=com