LDAP connections are created and managed under Settings → LDAP in the KUMA web interface. The LDAP table shows the tenants for which LDAP connections were created. The connections are displayed when a tenant is selected.
To add a tenant to the LDAP section:
In the KUMA web interface, under Settings → LDAP, click Add.
In the LDAP connections window, in the Tenant drop-down list, select the relevant tenant and click Save.
The tenant will be added and displayed in the LDAP table.
If you select a tenant, the LDAP connections window opens to show a table containing existing LDAP connections. Connections can be created or selected for editing.
After integration is enabled, information about Active Directory accounts becomes available in the alert window, the correlation events detailed view window, and the incidents window. If you click an account name in the Related users section of the window, the Account details window opens with the data imported from Active Directory.
The following account attributes can be requested from Active Directory:
accountExpires
badPasswordTime
cn
co
company
department
description
displayName (this attribute can be used for search during correlation)
distinguishedName (this attribute can be used for search during correlation)
division
employeeID
givenName
l
lastLogon
lastLogonTimestamp
mail (this attribute can be used for search during correlation)
mailNickname
managedObjects
manager
memberOf (this attribute can be used for search during correlation)
mobile
name
objectCategory
objectGUID (this attribute always requested from Active Directory even if a user doesn't specify it)
objectSid
physicalDeliveryOfficeName
pwdLastSet
sAMAccountName (this attribute can be used for search during correlation)
sAMAccountType
sn (this attribute can be used for search during correlation)
streetAddress
telephoneNumber
title
userAccountControl (this attribute can be used for search during correlation)
userPrincipalName (this attribute can be used for search during correlation)
whenChanged
whenCreated
In the Data storage time field, you can specify how many days KUMA will store information received from LDAP after such information stops being received from the Active Directory server.