Dell PowerStore Configuring Multiprotocol File Sharing

PDF

LDAP authentication

The following table summarizes the possible LDAP authentication options:

Table 1. LDAP authenticationColumn one lists the authentication option, column two describes the consideration for the specified option.
Option	Considerations
LDAP with Anonymous or Simple authentication	For Anonymous authentication, add the LDAP servers and specify the port number that the LDAP servers use, the Base DN, and the profile DN for the iPlanet/OpenLDAP server. For Simple authentication, add the LDAP servers and specify the following: If you are using AD, LDAP/IDMU: The port number used by the LDAP servers User account in LDAP notation format; for example, cn=administrator,cn=users,dc=svt,dc=lab,dc=com User account password Base DN, which is the same as the Fully Qualified Domain Name (for example, svt.lab.com). If you are using the iPlanet/OpenLDAP server: User account in LDAP notation format; for example, cn=administrator,cn=users,dc=svt,dc=lab,dc=com Password Base DN. For example, if using svt.lab.com, the Base DN would be DC=svt,DC=lab,DC=com Profile DN for the iPlanet/OpenLDAP server
LDAP with Kerberos authentication	There are two methods for configuring Kerberos: Authenticate to the SMB domain. With this option, you can either authenticate using the SMB server account or authenticate with other credentials. Configure a custom realm to lead to any type of Kerberos realm (Windows, MIT, Heimdal). With this option, the NAS server uses the custom Kerberos realm that is defined in the Kerberos subsection under the Security tab for the NAS server. AD authentication of the SMB server is not used when you choose this option. NOTE:If you use NFS secure with a custom realm, you have to upload a keytab file.