AD LDS as storage

Pointsharp ID supports AD LDS (Active Directory Lightweight Directory Services). This can be used for Pointsharp Storage as an option, instead of a full Directory or other LDAP v.3 compatible versions such as Open LDAP.

Install AD LDS

A built-in installation wizard is located in PSID Admin GUI.

Go to Tools and AD LDS Installation to start the installation guide — or manually install an AD LDS instance, if a different location or server is needed.

Setup prior installation

This is the AD LDS setup for the Pointsharp ID service.

Parameter Description

Password

The password to set for the Pointsharp ID user (see User or UPN ) to be used when connecting to the Directory. This password is required to consist of 8 characters containing at least one small letter, one capital letter, one numeric value and one special character (e.g. @, ", {, [, *, , etc.)

For example: P@ssw0rd

Instance Name

The name of the AD LDS Instance, for example, Pointsharp.

An AD LDS instance name must meet the following requirements:

  • It must be unique with respect to other AD LDS instances that are running on the same computer.

  • It must be no longer than 44 characters.

  • It must use characters only from the ranges of a through z, A through Z, or 0 through 9.

Address

The IP or hostname to locate the AD LDS instance.

For example, localhost

Port/SSL Port

The port to listen to for SSL and non SSL traffic.

For example, Port: 389, SSL Port: 636

UPN

The UPN version of the username (see User). Will be evaluated from the data set as User.

For example, psadmin@pointsharp.local

DN

The Domain Name.

For example, dc=pointsharp,dc=local

Name

The name of the Pointsharp ID user.

For example, psadmin

User

The user data for this Pointsharp ID to use when connecting to the storage.

For example, cn=psadmin,dc=pointsharp,dc=local

AD Group

The name of the Directory Group used.

For example, cn=Administrators,cn=Roles,dc=pointsharp,dc=local

Default

Press the Default button whenever you want to revert the settings to the pre-defined built-in default settings.

Issue: No users are showing up

When using AD LDS with Pointsharp ID and no users are showing up during search — please verify the User Storage Settings.

  1. Open PSID Admin GUI and go to the tab Storage.

  2. The Username Attribute in the User Storage needs to be configured to use cn instead of the default samAccountName.

  3. Click OK and Apply.

  4. Restart PSID Service and try again.