[XI 3.1] Modifiy LDAP configuration : delete aliases secLDAP and groups

[Former Member]

Hi,

replace LDAP configuration (OID) by another (AD) will remove aliases secLDAP and groups LDAP?

If not, how to remove all aliases secLDAP and all groups LDAP?

Regards

Christophe

[BasicTek · Accepted solution]

The order you do things is important here. If you are removing the old OID aliases and groups you must perform that task 1st in the CMC > Authentication > LDAP plugin remove all mapped groups and hit update. depending on how many mapped groups/users it may take time for the CMS to delete all their records (under a thousand pretty quick, under 10K maybe a n hour over 100K several hours.

You can login to query Builder to check and verify all the LDAP users are gone using the LDAP user query in here https://apps.support.sap.com/sap/support/knowledge/preview/en/2546772

At that point you can remove the LDAP server and switch to the new AD server. Once the server config is successful you can map in new users/groups.

NOTE: This workflow changes if you want to keep the old users, but that wasn't how I understood your question

-Tim