Ldap; Ldap Overview; Ldap Configuration; Setting Up Active Directory For Performing Queries - HP 336045-B21 - Server Console Switch KVM User Manual

LDAP

LDAP overview

LDAP is a vendor-independent protocol standard used for accessing, querying, and updating a directory
using TCP/IP. Based on the X.500 Directory Services model, LDAP is a global directory structure that
supports strong security features, including authentication, privacy, and integrity.
If individual user accounts are stored on an LDAP-enabled directory service, such as Active Directory, you
can use the directory service to authenticate users. The default values given for the LDAP search and query
parameters are defined for use with Active Directory.
You can configure and define your authentication parameters through the remote OBWI. The software
sends the username, password, and other information to the target device, which then determines whether
the user has permission to view or change configuration parameters for the target device through the
remote OBWI.

LDAP configuration

LDAP authentication, search, and query parameters are configured through the remote OBWI. For more
information, see Configuring LDAP (on page 50).

Setting up Active Directory for performing queries

Before you can use any of the querying modes, you must update Active Directory so that the selected
querying mode can assign the applicable authorization level for the user.
To set up group queries:
Log in to Windows® with administrator privileges.
1.
Open Active Directory software.
2.
Create an organizational unit to be used as group container.
3.
Create a computer object in Active Directory with a name identical to the switching system name for
4.
querying appliances or identical to the attached target devices for querying target devices. The
name must match exactly and is case-sensitive.
The appliance names and target device names used for group queries are stored in the appliance.
5.
The appliance name specified in the Appliance Overview screen of the remote OBWI and target
device names must be comprised of any combination of upper-case and lower-case letters, digits,
and hyphens, and must match the object names in Active Directory,
Create one or more groups under the group container organizational unit.
6.
Add the usernames and the target device and appliance objects to the groups you created in step 5.
7.
Specify the value of any attribute used to implement the Access Control Attribute.
8.
LDAP 67