## LDAP Profile General

An LDAP profile provides information to the Messenger agents about the LDAP servers in your system so that the Messenger agents can use LDAP access to Novell® eDirectoryTM. Use this property page to configure the LDAP Profile.

After you change settings on the General page, restart the Messenger agents to put the new settings into effect.

Distinguished Name and Scope
The information provided in the Base DN, Base Scope, and Additional DNs fields is used if no scope profile is in effect for your Messenger system.

> Base DN
> Browse to and select the container object in eDirectory where the majority of User objects are located. Your selection is displayed in the Base DN field as the distinguished name (DN) of the container object. For example, OU=users,O=corporate.
> Base Scope
> Select the base scope that the LDAP server will search: the entire subtree, the base DN and one level below, or only the base DN. If you select Only Search Base DN, the search will take the least amount of time.
> Additional DNs
> Click Add to select additional DNs to search for User objects. To edit a DN, select it, click Edit, then make changes. To remove a DN from the list, select it, then click Remove. To change the order (priority) of the DNs that will be searched, select a DN, then click Move Up or Move Down.
> Follow LDAP Referrals
> If one LDAP server cannot produce a result but refers the server to a second LDAP server, the second LDAP server will search if this option is selected. Selecting this option might add to the search time.

Query Settings

> Query Maximum Results
> Specify the maximum number of users you want returned to the Messenger client when users search for other users to add to their contact lists. The default number is 100.
> Query Timeout
> Specify in seconds the maximum amount of time you want a search for Messenger users to take. If no users are found within the allotted time, the Messenger user receives no results from the search. The default amount is 30 seconds.

User Settings
The following username and password will be encrypted.

> Username
> Specify the username the Messenger agent will use to access the LDAP server. Use LDAP naming, for example, cn=admin,o=novell.
> Set Password
> Click Set Password to specify the password the Messenger agent will use to access the LDAP server.

This user must meet the following specific requirements:

- Be visible to the Messenger agents using the eDirectory access method you have selected (direct or LDAP)
- Be a trustee of your Messenger system object (MessengerService, by default) and have the following rights as a trustee in order to access the Messenger agent objects:

  Property | Rights
  [All Attribute Rights] | - Compare, Read, and Write - Inheritable
  [Entry Rights] | - Browse - Inheritable

- Be a trustee of the eDirectory tree object or of the highest-level container object that will contain all User objects that will be part of your Messenger system, and have the following rights as a trustee in order to access User objects:

  Property | Rights
  [All Attribute Rights] | - Compare and Read - Inheritable
  [Entry Rights] | - Browse - Inheritable
  nnmBlocking nnmBlockingAllowList nnmBlockingDenyList nnmClientSettings nnmContactList nnmCustomStatusList nnmLastLogin | - Compare, Read, and Write - Inheritable

In ConsoleOne®, property names that start with lowercase letters sort after all property names that start with uppercase letters.

Novell Messenger Online Documentation

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk denotes a third-party trademark. For more information, see Legal Notices.