Configuring Ldap - Quantum Scalar i6000 User Manual

Chapter 3: Configuring Your Library
Using LDAP

Configuring LDAP

242
The remote client and operator panel do not allow you to create,
modify, or delete user account information on an LDAP server. This must
be done by the directory service provider.
User and Group Access
For LDAP accounts with user privileges, access to library partitions is
determined by group assignment on the LDAP server. Groups must be
created on the LDAP server with names that correspond to the library
partition names. User and library groups must reside in or below the
group context. Users without administrator privileges must be members
of both the user group defined in the LDAP server interface AND part of
a group with an identical name as the partition(s) on the library (RDN
[Relative Distinguished Name] only) in order to have access to the
corresponding partitions on the library. LDAP accounts with
administrator privileges have access to all partitions and administrative
functions and do not need to be assigned to partition-related groups on
the LDAP server.
Note: Usernames and group objects must be in LDAP Distinguished
Names formats.
OpenLDAP 2.4
You must install and run OpenLDAP 2.4 or later. The supported Objects
in OpenLDAP 2.4 and later are of type "Person" or derived objects, and
the group Objects must be of type "GroupOfNames."
OpenLDAP must be compiled with Overlay Support and requires the
installation of "memberOf" overlay. More information can be found in
the man pages of OpenLDAP with the "man slapo-member of"
command.
You can configure the Lightweight Directory Access Protocol (LDAP)
settings any time after the initial library configuration.
1 From the LMC, select Setup > User Configuration > LDAP. The
LDAP Configuration dialog box displays with the General tab
displayed.
Quantum Scalar i6000 User's Guide