To Define a New Identity Mapping for HTTP Headers

1. Edit the default DSML-over-HTTP identity mapping or create custom mappings for this protocol.

   The mapping entries must be located below the entry cn=HTTP-BASIC,cn=identity mapping,cn=config.

   Use the ldapmodify command to add this entry from the command line, as described in Adding Entries Using ldapmodify.

2. Restart Directory Server for your new mappings to take effect.

   Custom mappings are evaluated first. If no custom mapping is successful, the default mapping is evaluated. If all mappings fail to determine the bind DN for the DSML request, the DSML request is forbidden and rejected (error 403).