Configuring Xscf For Active Directory Support - Sun Oracle Sun SPARC Enterprise M3000 Product Notes

corresponding group name from the Active Directory or LDAP/SSL server. Each
group has privileges associated with it which are configured on the XSCF. A
user's group membership is used to determine the user's privileges once the user
is authenticated.
Three types of groups can be configured: administrator, operator, and custom. To
configure an administrator or operator group, only group name is required.
An administrator group has platadm, useradm, and auditadm privileges associated
with it. An operator group has platop and auditop privileges associated with it. To
configure a custom group, both group name and privileges are required. For each
type of group, up to five groups can be configured. A user assigned to more than
one group receives the sum of all privileges associated with those groups.
To support these new features, two new configuration screens (Active Directory
and LDAP/SSL) have been added to the Settings menu of the XSCF Web. Remote
users can log in and use the XSCF Web once they have been authenticated by Active
Directory or LDAP/SSL.
Note – If you are an Active Directory or LDAP/SSL user, log in to the XSCF
network using SSH and password rather than user public key. If you already
uploaded a public key, use the following command to delete it:
XSCF> setssh -c delpubkey -a -u proxyuser

Configuring XSCF for Active Directory Support

The commands setad(8) and showad(8) let you set and view the Active Directory
configuration from the command line.
By default, Active Directory support is disabled. To enable Active Directory support,
use the following command:
XSCF> setad enable
To disable Active Directory support, use the following command:
XSCF> setad disable
To show if Active Directory support is enabled or disabled, enter: :
XSCF> showad
Chapter 1 Sun SPARC Enterprise M3000 Server Product Notes for XCP 1092 3