Symantec XGS-4728F Installation Manual page 92

92 Setting up authentication plug-ins for VCS One
Setting up LDAP authentication
■ -p ldap_server_port specifies the LDAP server port. The default
value is 389. To bind the server, the command uses the user name and
password. If you do not provide a user name and password, the
command prompts you to provide them.
-u search_user specifies the base search paths for users. This
■
option is required.
■ -g search_group specifies the base search paths for the group. This
option is required.
■ -f attribute_list_file specifies the name of the attribute list
file. By default, the name is AttributeList.txt. This file is placed in the
working directory.
■ -m admin_username specifies the user name of the connecting user.
When anonymous searches are disabled, this option is required to
make the initial connection to the LDAP server.
■ -w admin_password specifies the password of the connecting user.
When anonymous searches are disabled, this option is required to
make the initial connection to the LDAP server.
-l loglevel generates a log file named haldapconf.debug. loglevel
■
determines the amount of information that goes into the log. The value
of loglevel ranges from 0 to 4.
The haldapconf -d command creates an attribute list file that contains
the valid values for all the attributes in descending order of priority. This
command also retrieves the valid values for the LDAP attributes that have
multiple values.
For example, to run
ldapserver.com, a user named testuser, and a group named testgroup, enter
the following command:
# /opt/VRTSvcsone/bin/
-u testuser -g testgroup
2 Determine the highest priority attribute and create an authentication CLI
that includes haat addldapdomain by running the following command:
# /opt/VRTSvcsone/bin/haldapconf -c -d domainname \
[-i attribute_list_file] [-o at_cli_file] [-a FLAT|BOB] \
[-s BASE|ONE|SUB] [-l loglevel]
where:
■ -d domain_name specifies the domain name. The domain name must
be unique.
-i attribute_list_file specifies the name of the attribute list
■
file. By default, the name is AttributeList.txt. The file is placed in the
working directory.
haldapconf -d for an LDAP server named
haldapconf -d -s ldapserver.com \