Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell OpenManage Enterprise-Modular Edition Version 2.00.00 for PowerEdge MX7000 Chassis User's Guide

PDF

Integrating directory services in OME-Modular

Supported attributes and pre-requisites for LDAP Integration

You can use Directory Services to import directory groups from AD or LDAP for use on the web interface. OME-Modular supports integration of the following directory services:
  1. Windows Active Directory
  2. Windows AD-LDS
  3. OpenLDAP
  4. PHP LDAP
Table 1. OME-Modular Pre-requisites/supported attributes for LDAP IntegrationSupported attributes for LDAP Integration
Attribute of User Login Attribute of Group Membership Certificate Requirement
Windows AD-LDS Cn, sAMAccountName Member
  • Subject to availability of FQDN in Domain Controller Certificate. SAN field can have both IPv4 and IPv6 or IPv4 or IPv6, or FQDN.
  • Only Base64 certificate format is supported
OpenLDAP uid, sn Uniquemember Only PEM certificate format is supported.
PHP LDAP uid MemberUid
Ensure that the following user pre-requisites are met before you begin with the directory service integration:
  1. BindDN user and user who is used for 'Test connection' must be the same.
  2. If Attribute of User Login is provided, only the corresponding username value that is assigned to the attribute is allowed for appliance login.
  3. User who is used for Test connection must be part of any non-default group in LDAP .
  4. Attribute of Group Membership must have the 'userDN' or the short name (used for logging in) of the user.
  5. When MemberUid is used as 'Attribute of Group Membership,' the username that is used in appliance login is considered case sensitive in some LDAP configurations.
  6. When search filter is used in LDAP configuration, user login is not allowed for those users who are not part of the search criteria mentioned.
  7. Group search works only if the groups have users assigned under the provided Attribute of Group Membership.
NOTE: If OME-Modular is hosted on an IPv6 network, the SSL authentication against domain controller using FQDN would fail if IPv4 is set as preferred address in DNS. To avoid this failure, do one of the following:
  • DNS should be set to return IPv6 as preferred address when queried with FQDN.
  • DC certificate must have IPv6 in SAN field.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\