Configuring AD/LDAP servers for NetBackup services
You can configure AD/LDAP servers for using the NetBackup services from the NetBackup Flex Scale GUI. You can configure only one AD/LDAP server at a time but you can add multiple AD/LDAP servers to the NetBackup Flex Scale cluster.
To configure AD/LDAP servers for NetBackup services using GUI
- Go to the Appliance GUI > Settings > Directory Services management tab. Click Configure.
- Select Manage NetBackup services.
Provide the AD/LDAP server details. Click Save.
Bind DN/LDAP administrator is the domain name of the administrative user or any user that has search permission to the user container, or user subtree as specified by UserBaseDN.
- Once the AD/LDAP server configuration operation is successful, the AD/LDAP server(s) appears in the list with usage as NetBackup services.
You can perform a test connection to validate the AD/LDAP configuration. On the same page, there is an option to remove the AD/LDAP configuration.
Note:
In a NetBackup Flex Scale deployment with both primary and media servers, role assignment for AD/LDAP users should be done from the NetBackup web UI. For more details, see the NetBackup™ Web UI Administrator's Guide on SORT.
You can also use RESTful APIs to configure AD/LDAP servers for NetBackup services.
To configure AD/LDAP servers for NetBackup services using RESTful APIs
- Configure an AD/LDAP server to the cluster with AD/LDAP server details as payload.
POST /api/appliance/v1.0/settings/ldap
- Test the configured server's connections on the cluster with AD/LDAP server domain name and password as payload.
POST /api/appliance/v1.0/settings/ldap/{server}/test - Get the successfully configured AD/LDAP server domain names on the cluster.
GET /api/appliance/v1.0/settings/ldap
- Get the server information such as whether, the server is AD/LDAP, BIND DN, and port with AD/LDAP server domain name as payload.
GET /api/appliance/v1.0/settings/ldap/{server} - Delete, remove or unconfigure the configured AD/LDAP servers from the cluster with AD/LDAP server domain name as payload.
Delete /api/appliance/v1.0/settings/ldap/{server}