IBM Storwize V7000 Unified Quick Installation Manual page 44

Table 12. LDAP configuration information
Field
LDAP SERVER IP
ADDRESS
SECURITY METHOD
Certificate Path
User Suffix
Group Suffix
Bind Distinguished
Name
Bind Password
Kerberos Server Name
Kerberos Realm
Kerberos Keytab File
24
IBM Storwize V7000 Unified: Model 2073-720 Quick Installation Guide
Value
_____._____._____._____
_____._____._____._____
[ ] Off
[ ] SSL (Secure Sockets Layer)
[ ] TLS (Transport Layer Security)
Note
This is the numeric IP address of the remote
LDAP server on your network.
The communications link between the Storwize
V7000 Unified system and your LDAP server
may be open (unencrypted), or may be secured
(encrypted). If secured, one of two methods is
used: SSL or TLS.
Note: When SSL or TLS is used, a security
certificate file must be copied from your LDAP
server to the Storwize V7000 Unified
Management Node.
If the SSL method is Off, leave this field blank.
If the SSL method is SSL or TLS, record the path
on the Storwize V7000 Unified Management
Node where you copy the Certificate file. As an
example, if the Certificate File is cacert.pem and
you store it in a directory called /certificates,
then record /certificates/cacert.pem.
Specifies the LDAP user suffix to be used.
Specifies the LDAP group suffix to be used.
This is the bind distinguished name from the
/etc/openldap/slapd.conf file on your LDAP
server. In the example following note 1 below,
the bind distinguished name is
cn=Manager,dc=v7kuldap,dc=com
This is the bind password from the
/etc/openldap/slapd.conf file on your LDAP
server. In the example following note 1 below,
the bind password is secret.
If you checked Kerberos in the Options field of
Table 10 on page 22, you must complete this
field. If you did not check Kerberos, leave this
field blank. This field is the name of the
Kerberos server used with your LDAP
environment.
If you checked Kerberos in the Options field of
Table 10 on page 22, then you must complete
this field. If you did not check Kerberos, leave
this field blank. This field is the Realm for the
Kerberos server used with your LDAP
environment.
If you checked Kerberos in the Options field of
Table 10 on page 22, then you must complete
this field. If you did not check Kerberos, leave
this field blank. This field is the file name for
the Kerberos KeyTab file.