LDAP aggregation does not work because accounts and groups are at Root DSE level

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hi Community,

I am in front of an LDAP directory wherein its owner has put all accounts and security groups at the level of Root DSE, which means that I cannot use a valid Search DN for configuring my Connector at the side of IIQ. Moreover, I looked for a usable Base DN and unfortunately this LDAP does not have that as well : at root level I only have “Root DSE” and then the rest is accounts and groups, that’s it :frowning:

Is there any known workaround ?

Thanks !

2

According to the LDAP standard, the Root DSE is effectively a zero-length String. If you’re lucky, you might be able to use an empty string for the base DN and root DN, but I highly suspect that will throw connector errors (and I don’t thing the UI allows those fields to be left empty).

Unfortunately, there are no work-arounds that I’m aware of beyond that long-shot noted above.