How the User Authentication Configuration page works.

  1. Take the LDAP Query, replace % in the query with the name under LDAP Username.
  2. Connect to LDAP using the distinguished name pointing to that user. If authentication fails (or user is not found), it will return "Invalid Credentials."
  3. Upon success, it takes LDAP Group Distinguished Name, and reads the object.
  4. If it cannot find the object, you receive the message, "No Group exists under that Distinguished Name."
  5. If it finds the object but the Group object is not under a domain name, it cannot read it, and returns the message, "Could not get members listing for Group Distinguished Name."
  6. If object is read, and the distinguished name in the object exists, the users are inserted into the local UIM database.
  7. If object is read, but it contains entries that do not link to a user, that particular user is skipped and not inserted into UIM.

For example:

LDAP URL ldap://ldaphostname:389
LDAP Query uid=%s,ou=usersgroup,dc=subdomain,dc=domain,dc=tld

Synchronization enabled Yes 
Synchronize every 1h
Group Distinguished Name cn=uptime.group,ou=usersgroup,dc=subdomain,dc=domain,dc=tld

LDAP Username asmith 
Password ******


Using Oracle LDAP server, there are two methods of creating groups, "groupOfNames" and "groupOfUniqueNames". Uptime Infrastructure Monitor uses "groupOfNames" method.

The following articles will help with setting up Oracle LDAP users under "groupOfNames"

If you are unsure of the paths, use applications such as Active Directory Explorer or Wireshark to connect to the AD/LDAP server to determine the path.