IBM Storwize V7000 Unified Manual page 84

Table 43. LDAP configuration information
Field
LDAP SERVER IP
ADDRESS
SECURITY METHOD
Certificate Path
User Suffix
Group Suffix
Bind Distinguished
Name
Bind Password
Kerberos Server Name
Kerberos Realm
Kerberos Keytab File
64
IBM Storwize V7000 Unified: Adding Storwize V7000 File Modules to an existing Storwize V7000 system 2073-720
Value
_____._____._____._____
_____._____._____._____
[ ] Off
[ ] SSL (Secure Sockets Layer)
[ ] TLS (Transport Layer Security)
Note
This is the numeric IP address of the remote
LDAP server on your network.
The communications link between the Storwize
V7000 Unified system and your LDAP server
may be open (unencrypted), or may be secured
(encrypted). If secured, one of two methods is
used: SSL or TLS.
Note: When SSL or TLS is used, a security
certificate file must be copied from your LDAP
server to the Storwize V7000 Unified
Management Node.
If the SSL method is Off, leave this field blank.
If the SSL method is SSL or TLS, record the path
on the Storwize V7000 Unified Management
Node where you copy the Certificate file. As an
example, if the Certificate File is cacert.pem and
you store it in a directory called /certificates,
then record /certificates/cacert.pem.
Specifies the LDAP user suffix to be used.
Specifies the LDAP group suffix to be used.
This is the bind distinguished name from the
/etc/openldap/slapd.conf file on your LDAP
server. In the example following note 1 below,
the bind distinguished name is
cn=Manager,dc=v7kuldap,dc=com
This is the bind password from the
/etc/openldap/slapd.conf file on your LDAP
server. In the example following note 1 below,
the bind password is secret.
If you checked Kerberos in the Options field of
Table 41 on page 62, you must complete this
field. If you did not check Kerberos, leave this
field blank. This field is the name of the
Kerberos server used with your LDAP
environment.
If you checked Kerberos in the Options field of
Table 41 on page 62, then you must complete
this field. If you did not check Kerberos, leave
this field blank. This field is the Realm for the
Kerberos server used with your LDAP
environment.
If you checked Kerberos in the Options field of
Table 41 on page 62, then you must complete
this field. If you did not check Kerberos, leave
this field blank. This field is the file name for
the Kerberos KeyTab file.