Quantum Scalar i6000 User Manual page 264

Chapter 3: Configuring Your Library
Using LDAP
246
Note: Non-admin library users also need to be members of
the groups that match the partition names for which
they are granted access. These group names do not
need to be specifically listed anywhere in the LDAP
setup on the library. When user logins are validated
during login, their group memberships for partition
access are validated automatically.
4 Test the LDAP configuration.
If you have administrative rights, you can use the Test functionality
to simulate an LDAP login for a specific user and quickly discover
what access rights the user has and to what partitions the user has
access.
Note: If help from support is needed, it is important to run this
test. More information is logged using the Test option than
using the normal login.
Note: The search filter for LDAP is
"(&(|(objectclass=User)(objectclass=person)(objectClass=p
osixAccount)(objectclass=inetOrgPerson))(|(cn=%USER%)(
uid=%USER%)(sAMAccountName=%USER%)))
This means that the objects the LDAP authentication looks
for are:
- User
- Person
- posixAccount
- inetOrgPerson
where the
- cn or
- uid or
- sAMAccountName
attributes match the actual username.
To test the LDAP configuration, do the following:
a Click the Test tab.
b Fill in the Test User section:
Quantum Scalar i6000 User's Guide