HP 4x1x16 HP IP and Server Console Switches G2 User Guide - Page 65

LDAP, LDAP overview, LDAP configuration, Setting up Active Directory for performing queries

Get HP 4x1x16 PDF manuals and user guides View all HP 4x1x16 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 65 highlights

LDAP LDAP overview LDAP is a vendor-independent protocol standard used for accessing, querying, and updating a directory using TCP/IP. Based on the X.500 Directory Services model, LDAP is a global directory structure that supports strong security features, including authentication, privacy, and integrity. If individual user accounts are stored on an LDAP-enabled directory service, such as Active Directory, you can use the directory service to authenticate users. The default values given for the LDAP search and query parameters are defined for use with Active Directory. You can configure and define your authentication parameters through the remote OBWI. The software sends the username, password, and other information to the target device, which then determines whether the user has permission to view or change configuration parameters for the target device through the remote OBWI. LDAP configuration LDAP authentication, search, and query parameters are configured through the remote OBWI. For more information, see Configuring LDAP (on page 49). Setting up Active Directory for performing queries Before you can use any of the querying modes, you must update Active Directory so that the selected querying mode can assign the applicable authorization level for the user. To set up group queries: 1. Log in to Windows® with administrator privileges. 2. Open Active Directory software. 3. Create an organizational unit to be used as group container. 4. Create a computer object in Active Directory with a name identical to the switching system name for querying appliances or identical to the attached target devices for querying target devices. The name must match exactly and is case-sensitive. 5. The appliance names and target device names used for group queries are stored in the appliance. The appliance name specified in the Appliance Overview screen of the remote OBWI and target device names must be comprised of any combination of upper-case and lower-case letters, digits, and hyphens, and must match the object names in Active Directory, 6. Create one or more groups under the group container organizational unit. 7. Add the usernames and the target device and appliance objects to the groups you created in step 5. 8. Specify the value of any attribute used to implement the Access Control Attribute. LDAP 65

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
LDAP 65
LDAP
LDAP overview
LDAP is a vendor-independent protocol standard used for accessing, querying, and updating a directory
using TCP/IP. Based on the X.500 Directory Services model, LDAP is a global directory structure that supports
strong security features, including authentication, privacy, and integrity.
If individual user accounts are stored on an LDAP-enabled directory service, such as Active Directory, you
can use the directory service to authenticate users. The default values given for the LDAP search and query
parameters are defined for use with Active Directory.
You can configure and define your authentication parameters through the remote OBWI. The software sends
the username, password, and other information to the target device, which then determines whether the user
has permission to view or change configuration parameters for the target device through the remote OBWI.
LDAP configuration
LDAP authentication, search, and query parameters are configured through the remote OBWI. For more
information, see Configuring LDAP (on page
49
).
Setting up Active Directory for performing queries
Before you can use any of the querying modes, you must update Active Directory so that the selected
querying mode can assign the applicable authorization level for the user.
To set up group queries:
1.
Log in to Windows® with administrator privileges.
2.
Open Active Directory software.
3.
Create an organizational unit to be used as group container.
4.
Create a computer object in Active Directory with a name identical to the switching system name for
querying appliances or identical to the attached target devices for querying target devices. The name
must match exactly and is case-sensitive.
5.
The appliance names and target device names used for group queries are stored in the appliance. The
appliance name specified in the Appliance Overview screen of the remote OBWI and target device
names must be comprised of any combination of upper-case and lower-case letters, digits, and
hyphens, and must match the object names in Active Directory,
6.
Create one or more groups under the group container organizational unit.
7.
Add the usernames and the target device and appliance objects to the groups you created in step 5.
8.
Specify the value of any attribute used to implement the Access Control Attribute.