HP 4x1Ex32 HP IP Console Viewer User Guide - Page 209

Query Parameters tab

Page 209 highlights

The Search DN field enables you to define any user in the directory that the console switch uses to log in to the Directory Service. NOTE: HP recommends creating a user account specifically for LDAP queries instead of using the admin account. After the console switch is authenticated, the Directory Service grants it access to the directory to perform the user authentication queries, specified on the Query Parameters tab. The default values are cn=Administrator, cn=Users, dc=yourDomainName, and dc=com and should be modified for your network environment. For example, to define an administrator DN for test.view.com, enter cn=Administrator, cn=Users, dc=test, dc=view, dc=com. This is a required field unless the Directory Service has been configured to allow anonymous search, which is not in the default. NOTE: A comma must separate each Search DN value. The Search Password field is used to authenticate the administrator or user specified in the Search DN field. The Search Base field enables you to define a starting point from which LDAP searches begin. The default values are dc=yourDomainName and dc=com and should be modified for your network environment. HP recommends that the Search Base field be set to the DN of the root of the LDAP Directory Service namespace. For example, to define a search base for test.com, enter dc=test, dc=com. NOTE: A comma must separate each Search Base value. The UID Mask field specifies the search criteria for User ID searches of LDAP servers. The format should be in the form =, where is the schema property name in the directory. The default value is sAMAccountName=%1, which is correct for use with Active Directory. This field is required for LDAP searches. Query Parameters tab NOTE: When the Use LDAP for Authentication Only checkbox is selected, all of the Query Parameters tab fields are deactivated. Using directory services integration 209

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339

Using directory services integration
209
The Search DN field enables you to define any user in the directory that the console switch uses to log in
to the Directory Service.
NOTE:
HP recommends creating a user account specifically for LDAP queries instead of using
the admin account.
After the console switch is authenticated, the Directory Service grants it access to the directory to perform
the user authentication queries, specified on the Query Parameters tab. The default values are
cn=Administrator, cn=Users, dc=yourDomainName, and dc=com and should be modified for your
network environment. For example, to define an administrator DN for test.view.com, enter
cn=Administrator, cn=Users, dc=test, dc=view, dc=com. This is a required field unless the Directory
Service has been configured to allow anonymous search, which is not in the default.
NOTE:
A comma must separate each Search DN value.
The Search Password field is used to authenticate the administrator or user specified in the Search DN
field.
The Search Base field enables you to define a starting point from which LDAP searches begin. The default
values are dc=yourDomainName and dc=com and should be modified for your network environment. HP
recommends that the Search Base field be set to the DN of the root of the LDAP Directory Service
namespace. For example, to define a search base for test.com, enter dc=test, dc=com.
NOTE:
A comma must separate each Search Base value.
The UID Mask field specifies the search criteria for User ID searches of LDAP servers. The format should be
in the form <name>=<%1>, where <name> is the schema property name in the directory. The default
value is sAMAccountName=%1, which is correct for use with Active Directory. This field is required for
LDAP searches.
Query Parameters tab
NOTE:
When the Use LDAP for Authentication Only checkbox is selected, all of the Query
Parameters tab fields are deactivated.