Enables or disables LDAP Link.

Valid Values:

0—LDAP Link disabled

1—LDAP Link enabled

Default value: 0

The LDAP server URL.

Example:

SET PARAMETER LDAPLinkURL='ldap://glw2k8-64.dc.com';

The time interval, in seconds, by which the LDAP Server and Vertica server synchronize.

Default Value: 86400 (one day).

The first interval, in seconds, for LDAP/Vertica synchronization after the clerk node joins the cluster.

Default Value: 120

The time, in seconds, the system waits to retry a failed synchronization.

Default Value: 10

The number of retry attempts if synchronization failed.

Default Value: 10.

The base dn from where to start replication.

Example:

SET PARAMETER LDAPLinkSearchBase='ou=vertica,dc=mycompany,dc=com';

Vertica recommends using a separate OU for database users.

The timeout length, in seconds, for the LDAP search operation during an LDAP Link Service run.

Default Value: 10

Indicates what dn level to replicate.

Valid Values:

• sub—Replicate entire subtree under baseDN
• one—Replicate to one level under baseDN
• base —Replicate only the baseDN level

If you decrease the scope (for example, sub to one), some users may not be recognized during the next synchronization.

Default Value: sub

Determines how to filter users to be replicated.

Default Value: "(objectClass=inetOrgPerson)"

Determines how to filter groups to be replicated.

Default Value: "(objectClass=groupofnames)"

[Optional] The LDAP field to use when creating a role name in Vertica.

Default Value: cn

The LDAP group that identifies the members of an LDAP group. This attribute returns a Fully Qualified Domain Name (FQDN).

Default Value: member

The LDAP field to use when creating a user name in Vertica.

The LDAP Bind DN used for authentication.

Example:

SET PARAMETER LDAPLinkBindDN='CN=amir,OU=QA,DC=dc,DC=com';

The valid password for the LDAP Bind DN to access the server. Only accessible by the dbadmin user.

Example:

SET PARAMETER LDAPLinkBindPswd='password';

[Optional] Specifies whether or not to use the StartTLS operation during bind. You can only use this parameter if the LDAP server's URL is "ldap://..." (not "ldaps://..."

Valid Values:

0 - Do not use starttls

1 - Use starttls

Default Value: 0

[Optional] Specifies how Vertica behaves when verifying the LDAP server's certificate when using TLS. The connection between Vertica and the LDAP server will only succeed if conditions for the specified value are met.

Valid Values:

hard: LDAP server must provide a valid certificate.

allow: LDAP server does not have to provide a certificate.

try: LDAP server must either provide a valid certificate or not provide one at all.

never: No requirements (Vertica does not request the LDAP server's certificate).

For details, see Using LDAP Over TLS.

Default Value: allow

[Optional] The path to a CA certificate.

[Optional] The path to the directory containing CA certificates.

Determines how to resolve a user conflict.

Valid Values:

IGNORE—Ignores the incoming LDAP user and maintains the existing Vertica user.

MERGE—Converts the existing user to an LDAP user.

Default Value: MERGE

Enables or disables the shutdown of LDAPLink synchronization if no users are found in LDAP.

Valid values:

0 - Disables the LDAPLink synchronization shutdown if no users are found. This may lead to inadvertent dropping of Vertica users.

1 - Enables the LDAPLink synchronization shutdown if no users are found. This prevents inadvertent dropping of  Vertica users.

[Optional] Tests the connection to the LDAP server and logs the response without doing a synchronization. Also tests if parameters are correctly set.

Note that this parameter is not the preferred dry run method. Instead, the LDAP_Link_Dryrun family of metafunctions provides more granular control over configurations and is the preferred way to perform LDAP Link dry runs.

Valid Values:

0 - Disables LDAPLinkDryRun

1 - Enables LDAPLinkDryRun

Default Value: 0