Scalar I500 User's Guide - Quantum scalar i500 User Manual

Scalar i500 User's Guide

Configuring Secure LDAP on the Library
Configuring Secure LDAP is optional. You can configure Secure LDAP
using one of the following methods (do not use both).
• — Uses Secure Sockets Layer (SSL) over a specific port for
LDAPS
LDAP (636). You may enable LDAP over SSL (LDAPS) by entering a
URI in the form of "ldaps://hostname" in the Server URI field. This
will use SSL to send secure communication via port 636. If the LDAP
server does not support LDAPS or does not have LDAPS enabled,
then login operations will fail. LDAPS has been deprecated in favor
of using StartTLS (see option below). Do not use LDAPS if you are
using StartTLS. Once you apply LDAPS, StartTLS will not be
available.
• — Uses Transport Layer Security (TLS) over the same port
StartTLS
as regular LDAP (389). Select the
secure LDAP communication using TLS. If TLS mode is not
supported on your LDAP server, then login operations will fail. Do
not use StartTLS if you are using LDAPS. See
page 103.
Installing an LDAP TLS CA Certificate
If you are using LDAPS or StartTLS, you can also install a TLS CA
certificate for additional verification that the LDAP server has not been
compromised. The certificate must be the same certificate that is installed
on your LDAP server and must be in .pem format. The library will only
perform the verification if you have configured Secure LDAP (using
either LDAPS or StartTLS). Place a copy of the certificate file in an
accessible location on your computer and use the
and install it. Once a certificate is installed, you can remove it by selecting
the
Remove TLS CA Certificate
page 103.
Configuring LDAP on the Library
Before configuring LDAP, obtain the following LDAP parameters from
your network administrator. You need to enter these parameters in the
Setup - Remote Authentication
Chapter 3 Configuring Your Library
Working With User Accounts
check box to configure
StartTLS
Figure Figure 15
Browse
check box. See Figure Figure 15
screen on the Web client.
3
on
3
button to locate
on
3
101