LDAP Attributes Tab (Prinicpal Information Window)

The LDAP Attributes tab displays the mandatory LDAP attributes that need to be specified while creating a Kerberos principal. These attributes need to be specified only if the LDAP DN does not exist in the Directory server. The mandatory attributes displayed in this tab are based on the default object class template that you specified while configuring your Kerberos server with LDAP as the backend.

The LDAP attributes tab is not displayed if the default object class template consists of only one mandatory attribute. Also, if you have entered an LDAP DN that already exists in the Directory server, then the LDAP attributes tab is disabled.

	NOTE: You can view only nine mandatory attributes of the default object class template in the LDAP attribute tab. By default, the remaining mandatory attributes are set to their default values.

You can use the LDAP Attributes tab in the Principal Information window to assign LDAP attributes for a principal, as shown in Figure 8-8 “LDAP Attributes Tab”.

Figure 8-8 LDAP Attributes Tab

Figure 8-8 “LDAP Attributes Tab” describes the components of the LDAP Attributes tab, if you have opted for the object class posixaccount. The LDAP Attributes tab displays the mandatory attributes based on the object class selected.

	NOTE: You must enter values for all the mandatory attributes in the LDAP Attributes tab; else a warning message is displayed.