Dell PowerFlex v3.6.x User Roles and LDAP Usage Technical Notes

Configure LDAP authentication for LIA on the PowerFlex Gateway

If Linux LDAP servers are used for authenticating LIA, add the Linux LDAP server parameters to the gatewayUser.properties file before switching the LIA authentication mode from native to LDAP in an existing PowerFlex system. If a Windows LDAP server is used, skip this task.

1. Log in to the PowerFlex Gateway server and open the gatewayUser.properties file, located at /opt/emc/scaleio/gateway/webapps/ROOT/WEB-INF/classes, for editing.
2. Under # properties for add lia ldap server, add the following properties, based on your LDAP server settings.

   • # properties for add lia ldap server
     lia.ldap.replaceExisting=
     lia.ldap.usernameDnFormat=
     lia.ldap.authorizerDn=
     lia.ldap.searchFilterFormat=
     

     • The value for lia.ldap.replaceExisting= should be left blank, unless an existing LDAP server configuration on the PowerFlex Gateway is being overwritten.
     • Use the values configured in your organization's LDAP servers for the following parameters:

       lia.ldap.usernameDnFormat=
       lia.ldap.searchFilterFormat=
       

     • The value for the lia.ldap.authorizerDn= should be left blank.

     For example:

     # properties for add lia ldap server
     lia.ldap.replaceExisting=
     lia.ldap.usernameDnFormat=CN=[USER],OU=People,DC=ldap,DC=com
     lia.ldap.authorizerDn=
     lia.ldap.searchFilterFormat=(&(objectClass=userSecurityInformation)(cn=[USER])(memberOf=[GROUP]))
     

3. Restart the PowerFlex Gateway service:
   • On a Linux server run:

     /etc/init.d/scaleio-gateway restart

   • On a Windows server: From the Windows Services window, restart the EMC ScaleIO Gateway.