Configure LDAP Vendor Attributes for SecureChange

Update name of an LDAP server field

  1. To change the name of the attribute, run the following command:

    kubectl exec -it deploy/sc-server -c sc-server -- bash -c "psql -Usecurechange securechangeworkflow -h stolon-sc-svc -p 5432 -c \"update ldap_attr set attr_name = '<attr_name>' where vendor='Active Directory' and attr_objective='<attr_objective>';\""

    For the list of LDAP server attributes required for any custom LDAP configuration, see LDAP Server Attributes.

  2. After you change the configuration, restart the tomcat server with the command:

    kubectl delete pod -l app=sc-server

Supported arguments

Argument

Description

-c "update ldap_attr set attr_name = '<attr_name>'

Command to update the specified attribute name

vendor '<vendor_name>'

The name of the vendor shown in SecureChange > Settings > LDAP > LDAP Info > Vendor

attr_objective '<attr_objective>'

The specific attribute in the SecureChange database from the LDAP Server Attributes

attr_name '<attr_name>'

The name of the LDAP server field that corresponds to the attr_objective

Sample code

For the 'Oracle' vendor, running the following commands updates the mail attribute to ‘email’ :

kubectl exec -it deploy/sc-server -c sc-server -- bash -c "psql -Usecurechange securechangeworkflow -h stolon-sc-svc -p 5432 -c \"update ldap_attr set attr_name = 'email' where vendor='Oracle' and attr_objective='mailAttributeName';\""

kubectl delete pod -l app=sc-server