Authentication Settings - HP 3PAR StoreServ 7450c Planning Manual

Table 23 Authentication Settings
Item
Which external Authentication providers will be used?
In addition to local users and groups, File Persona supports Active Directory
and LDAP
Active Directory? Answer: Yes or No
LDAP? Answer Yes or No
List the order in which Authentication providers should be used to resolve
user credentials.
Answer example: If File Persona was used to present SMB shares to Windows
clients, the following would be the order: 1st: Active Directory, 2nd: Local
Users and Groups, and 3rd: Not Used
Active Directory: Domain Name
Record the Active Directory Domain Name that the system will join for
Authentication services. All File Persona nodes will join the same Domain.
By default, an account will be created in the Computers OU for each node
using the naming format <3PAR Serial number>-<node number>.
Active Directory: User name and password
Identify an Active Directory user that has sufficient privileges to allow the File
Persona nodes to join the Active Directory Domain.
Active Directory: File Persona Share Administrator
Optional: If an account with domain administrator privileges cannot be used
to manage the File Persona share(s) permissions. Then an account must be
defined which can be used to manage File Persona share(s) permissions to
the "BUILTIN\Administrators" group with the HP 3PAR CLI command
setfsgroup –memberlist +<domain account> Administrators.
LDAP: Server Host
LDAP: Bind DN
LDAP: Base of search
LDAP: NetBios name
LDAP: Password (optional)
Password associated with the bind DN
LDAP: Schema
Answer: Posix or Samba
Posix is the default.
LDAP: Provide a Certificate (optional)
Answer: Yes or No
Use of an LDAP certificate is optional
LDAP: Certificate Protocol
Answer: TLS or SSL
Only needed if using an LDAP certificate
LDAP: Certificate common name
LDAP: Certificate file
Identify the file containing the the LDAP certificate
Answer/Value
Active Directory:
LDAP:
1st:
2nd:
3rd:
File Persona Node Installation 41