Dell PowerFlex 4.5.x Administration Guide

Add a directory service

Add a directory service for user authentication.

1. On the menu bar, click Settings.
2. In the left pane, click User Management, then in the right pane, click Directory services.
3. Click Add.
4. For LDAP Configuration, configure the following:
   1. In the Address box, enter the address of the authentication server.
      The address must be specified in URL-like format:

      • Enter ldap://HOSTNAME or IP ADDRESS for a plaintext LDAP connection.
      • Enter ldaps://HOSTNAME or IP ADDRESS for a secure LDAP connection.
      For example: ldap://100.68.68.1
   2. In the Bind DN box, enter the bind distinguished name attributes.
      The Bind Distinguished Name (DN) uniquely identifies an entry and its position in the hierarchy of entries contained in a directory server.
      For example: CN= <your AD user account>,CN=Users,DC=asm,DC=delllabs,DC=net.
   3. In the Bind DN Password box, enter the Bind DN password.
      This is the password used to access the LDAP server.
   4. In the Timeout box, enter a value in milliseconds.
      For example: 1000
5. For User Search Settings, configure the following:
   1. In the Username LDAP Attribute box, enter the name of an LDAP attribute that is mapped as the username. For many LDAP servers, it can be uid. For Active Directory, it can be sAMAccountName or cn. The attribute should be filled in for all LDAP users you want to import from LDAP to PowerFlex.
      For example: sAMAccountName
   2. In the ID Attribute box, enter the ID attribute for users.
      For example: sAMAccountName
   3. In the Object Class box, enter an object class.
      For example: top,person,organizationalPerson,user
   4. In the Search Path box, enter the search path.
      The search path is used to identify and retrieve entries in the directory information tree that match a set of criteria.
      For example: CN=Users,DC=asm,DC=delllabs,DC=net
6. For Group Search Settings, configure the following:
   1. In the Group Member Attribute box, enter a group member name.
      For example: member
   2. In the Group ID Attribute box, enter the group ID.
      For example: cn
   3. In the Group Object Class box, enter the group object class.
      For example: group
   4. In the Group Search Path box, enter the group search path.
      The search path is used to identify and retrieve entries in the directory information tree that match a set of criteria for groups.
      For example: CN=Users,DC=asm,DC=delllabs,DC=net
7. Click Test Connection.
   If the test is successful, the Submit button will become active. If the test fails, you will not be able to proceed until you fix the connectivity issue.
8. When you have finished making your changes, click Submit.