Documentation for Crowd 2.0.x. Documentation for other versions of Crowd is available too.
When configuring an LDAP directory connector in Crowd, you can set relaxed DN standardisation on or off. This page gives some background to the setting of this option.
Crowd needs to compare DNs (distinguished names) to check a number of things, such as whether a user is a member of a group. Some directories guarantee that DNs will always be in a standard format, and some return slight variants with changes such as extra whitespace. If we know that, in a specific directory, DNs are case insensitive and are always returned in a compact format (i.e. the separators are commas without spaces) then we can convert both the attribute names and values to lower case and just do a direct string comparison.
Using relaxed DN standardisation provides significant performance benefits, so we recommend enabling it where possible.
Relaxed DN Standardisation in Crowd |
Processing in Crowd |
コメント |
---|---|---|
オフ |
Crowd will perform the full DN parsing and compare the parsed version. |
See below for default settings for each directory type. |
オン |
Crowd will perform a |
If this setting is 'off' by default for your directory type (see below) then you may be able to turn it on. Both of the following two statements need to be true:
|
Crowd ships with the following default settings, as determined by the characteristics of each directory type.
ディレクトリ タイプ |
Relaxed DN Standardisation |
---|---|
オフ |
|
オフ |
|
オン |
|
オン |
|
オフ |
|
オン |
|
オフ |
|
オフ |
|
オン |
|
オン |
|
オン |
|
オフ |