Symantec Veritas Cluster Server Installation Manual page 79

Client communication with LDAP servers
Figure 4-2
1. When a user runs HA
commands, AT initiates user
authentication with the
authentication broker.
2. Authentication broker on VCS
node performs an LDAP bind
operation with the LDAP directory.
See the Symantec Product Authentication Service Administrator s Guide.
The LDAP schema and syntax for LDAP commands (such as, ldapadd, ldapmodify,
and ldapsearch) vary based on your LDAP implementation.
Before adding the LDAP domain in Symantec Product Authentication Service,
note the following information about your LDAP environment:
The type of LDAP schema used (the default is RFC 2307)
UserObjectClass (the default is posixAccount)
UserObject Attribute (the default is uid)
User Group Attribute (the default is gidNumber)
Group Object Class (the default is posixGroup)
GroupObject Attribute (the default is cn)
Group GID Attribute (the default is gidNumber)
Group Membership Attribute (the default is memberUid)
URL to the LDAP Directory
Installing and configuring VCS
Installing and configuring VCS 5.0 RU3
VCS client
4. AT issues the credentials to the
user to proceed with the
command.
VCS node
(authentication broker)
3. Upon a successful LDAP bind,
AT retrieves group information
from the LDAP direcory.
LDAP server (such as
OpenLDAP or Windows
Active Directory)
79