Get users from AD by LDAP to SAP (ABAP)

[Former Member]

Hi All,

I try to connect SAP Netweaver 7.0 with MS AD by LDAP to retrieve information from AD about users.

I successfully make LDAP server in tr LDAP and also I test it and it works - as a result I can find users in AD.

Now I try to make synchronization via program RSLDAPSYNC_USER but it didn't find any users in AD.

Do I need mandatory to extent AD schema for synchronizing users from AD?

Is there other programs for creating users in SAP system with information from AD?

I do not need to create or change users in AD from SAP system, I only need to create users in SAP system with information from AD.

Maxim.

[Former Member]

Hi Maxim,

1. You define the logical LDAP Server using LDAP transaction.

2. You can use LDAPMAP tcode to do the required settings for mapping the SAP User Data fields

to the LDAP directory attributes.

3. Once the mapping is defined, then run the report RSLDAPSYNC_USER which will replicate all

the users created on the ABAP side or viceversa.

4. You can also schedule the report dialy as a backgroundjob for delta synchronization.

Hope this helps.

Regards,

Kiran Kandepalli.

[Former Member]

Hi Kiran,

thanks for reply.

I do 1 and 2 step. In step 2 I use "import proposal" and doesn't change anything.

But when I try to run RSLDAPSYNC_USER I see this log:

Connection created to server AD

Number of Objects in Directory 0

Number of Objects in Database 40

User DDIC was automatically excluded from the synchronization

User SAP* was automatically excluded from the synchronization

User SAPCPIC was automatically excluded from the synchronization

Objects that Exist Both in the Directory and in the Database: 0

Ignored: 0

Objects that Only Exist in the Directory: 0

Ignored: 0

Objects that Only Exist in the Database: 37

Ignored: 37

Total Time Required: 00:00:01

Connection to server AD terminated

Where I see that - Objects that Only Exist in the Directory: 0

It means that program couldn't read any records from AD.

Maxim.