Quantum Scalar i500 User Manual page 111

Scalar i500 User's Guide
• The library supports user account information in the schema defined
by RFC 2307. User password schemes must be encrypted using UNIX
crypt. In addition, user names (uid) and passwords (userPassword)
must be created using lowercase characters to be compatible with the
library.
LDAP Server Guidelines
For LDAP users with user privileges, access to library partitions is
determined by group assignment on the LDAP server. Groups must be
created on the LDAP server with names that correspond to the library
partition names. Users with user privileges must be assigned to these
groups on the LDAP server to have access to the corresponding partitions
on the library. LDAP users with administrative privileges have access to
all partitions and administrative functions and do not need to be assigned
to partition-related groups on the LDAP server.
The screen displays LDAP login options only when LDAP is
Login
enabled.
Configuring LDAP on the Library
Before configuring LDAP, obtain the following LDAP parameters from
your network administrator. You need to enter these parameters in the
Setup - Remote Authentication
• — The Uniform Resource Identifier (URI) of the
Repository URI
LDAP server where user account information is stored. The URI
includes the LDAP server host name or IP address and can include
the LDAP server network port. Port 389 is the default.
• — the distinguished name that contains the groups.
Group DN
• — the distinguished name that contains the users.
User DN
• — the domain in which the user accounts reside (user
Default domain
names and groups, including library user group and admin group
below).
•
Principle authorization
search the LDAP directory. The library logs into LDAP using this ID.
•
Credential authorization
authorization login ID.
Chapter 3 Configuring Your Library
Working With User Accounts
screen on the web client:
— an LDAP user login ID with permissions to
— the password for the principal
3
3
96