Options for authentication domain configuration
The first page of the authentication domain configuration wizard is divided into two areas.
See Table: Server information by data center.
See Table: Configuration options applicable to all data centers.
You must specify the server information separately for each data center. When you select a different data center the server information fields clear so you can enter the new information. If the same server is used for multiple data centers, enter the same information for both data centers.
Table: Server information by data center
Option | Description |
|---|---|
Server (Mandatory) | Enter the fully-qualified host name or IP address of the LDAP server. If a secure session is configured with the LDAP server using SSL certificates, you must enter the fully-qualified host name that matches with the fully-qualified host name in the LDAP server certificate. |
Port (Mandatory) | Displays the number of the port on which the LDAP server is configured to run. By default, this field displays the port number as 389. You can edit this port number, if required. |
Connect using SSL/TLS | Select this check box to use the Secure Sockets Layer (SSL) or Transport Layer Security (TLS) certificates to establish a secure channel between the authentication broker and the LDAP server. |
Certificate | Browse to the location of the trusted root CA certificate of the vendor that issued the LDAP server certificate. |
The remaining fields apply to all data centers; fill these in as required.
Table: Configuration options applicable to all data centers
Option | Description |
|---|---|
The authentication servers require me to log on. | Select this check box if the anonymous operations are disabled on the LDAP server and a bind user ID is required to proceed with configuring the LDAP-based authentication |
Bind User Name/DN | Enter the complete Distinguished Name (DN) of the user that is used to bind to the LDAP server. If the LDAP server being used is Active Directory (AD), you can provide the DN in the following formats: username@domainname.com or domainname\username For example, you can provide the DN as Administrator@enterprise.domainname.com ENTERPRISE\Administrator For RFC 2307 compliant LDAP servers, specify complete bind DN. For example, cn=Manager,dc=vss,dc=veritas,dc=com The LDAP or the AD administrator can provide you the bind user name that you can use. |
Password | Enter the password that is assigned to the bind user name that you use. |
Query Information: | |
User (Mandatory) | Under Query Information, enter the user name based on which the system detects the LDAP server-related settings. Ensure that the user name does not contain any special characters. The system determines the search base based on the user name that you specify in this field. |
Group | Enter the name of the user group based on which the system detects the LDAP server-related settings. Ensure that the group name does not contain any special characters. The system determines the search base based on the group name along with the user name that you have specified. |
Once you have entered information for all data centers, click Next.
The LDAP standard panel is introduced to select and discover the LDAP schema for the configuration.
Table: Configuring attributes for LDAP standards
Option | LDAP standard description | Steps |
|---|---|---|
RFC2307 | Resiliency Manager uses LDAP schema RFC2307 standard to populate the required attributes and discover the information from LDAP server. | If you select this option and click Next, on Verify and Configure page the LDAP server uses RFC2307 schema for configuration. |
Microsoft Active Directory | Microsoft Active Directory is an Active Directory server which uses LDAP protocol. | If you select this option and click Next, on Verify and Configure page the LDAP server uses Microsoft Active Directory schema for configuration. |
Custom | The LDAP server uses the default schema as part of LDAP configuration. | If you select this option, you need to provide following attributes for LDAP server and then click Next. The LDAP server will use the default schema present as part of the LDAP configuration.
Click Submit and Done. On Verify and Configure panel, the inputs provided are displayed. |