H3C Technologies H3C Intelligent Management Center - Manual (Page 98)

89
• For users on the LDAP server that do not exist in TAM, user synchronization is carried out according
to the configured synchronization policy.
Viewing LDAP users
TAM provides the following methods to view LDAP users:
• The device user list.
• The all bound user list.
• The bound user list of a specific synchronization policy.
Viewing LDAP users in the device user list
To view LDAP users in the device user list:
1. Click the User tab.
2. On the navigation tree, select Device User View > All Device Users.
The Device User list displays all device users. Account names with the icon are LDAP users.
The list includes the following columns:
{
Account Name—Account name of the LDAP user.
{
Device User Group—Device user group to which the LDAP user belongs.
{
Created At—Date when the LDAP user was created.
{
Expired At—Date when the LDAP user expires and becomes invalid. The user cannot log in to
any device after 0:00 on the specified date.
An empty field indicates that the LDAP user never expires.
{
Status—Device user account state. Options are:
− Normal—The user account can be used for device login.
− Cancelled—The user account is already deleted and cannot be used for device login.
{
Modify—Click the Modify icon for an LDAP user to display the page for modifying the
LDAP user information.
Viewing LDAP users in the All Bound User list
To view LDAP users in the All Bound User list:
1. Click the User tab.
2. On the navigation tree, select Device User > LDAP Users from the navigation tree.
The All Bound User list displays all LDAP users.
The list includes the following columns:
{
Account Name—Account name of the LDAP user.
{
Device User Group—Device user group to which the LDAP user belongs.
{
Policy Name—Name of the LDAP synchronization policy the LDAP user is bound with. Click the
name of a policy to view its details. For more information about LDAP synchronization policy
details, see " Viewing LDAP synchronization policy details ."
{
Status in LDAP Server—State of the LDAP user during last synchronization. Options are:
− Existent—The user exists on the LDAP server.
− Inexistent—The user does not exist on the LDAP server.