Configuring LDAP server details
Procedure
Configure the LDAP server details by using the
set ldap
command.
Example minimal configuration:
set ldap server=dir_server.company.com basedn="dc=company,dc=com"
Example with additional search settings for user and group:
set ldap server=dir_server.company.com port=636 login=uid
set ldap basedn="ou=org,dc=company,dc=com"
set ldap userdn="ou=devs,ou=org,dc=company,dc=com" userdn="ou=test,ou=org,dc=company,dc=com"
set ldap userfilter="objectClass=posixAccount"
set ldap groupdn="ou=groups,ou=org,dc=company,dc=com"
set ldap groupfilter="objectClass=posixGroup"
Example for an Active Directory server:
set ldap server=dir_server.company.com login=sAMAccountName
set ldap basedn="dc=company,dc=com"
set ldap userfilter="(&(objectClass=user)(!(objectClass=computer))"
set ldap groupfilter="objectClass=group"
set ldap sid=S-1-5-21-3623811015-3361044348-30300820
Example for server that requires a bind name and password:
Set bindpw to be prompted for a bind password (if not in script mode)
set ldap server=dir_server.company.com port=636 login=uid
set ldap basedn="dc=company,dc=com" binddn="cn=admin,dc=company,dc=com"
set ldap bindpw
Please enter the bind password: _
More information
Set LDAP command information
The
set LDAP
command is used from the RMC command line to configure the LDAP server details.
Usage: set ldap [server=
SERVER
] [port=
SSL_PORT
] [login=
LOGIN_ATTRIBUTE
]
[binddn=
BIND_DN
] [bindpw] [sid=
AD_DOMAIN_SID
] [basedn=
BASE_DN
]
[userfilter=
USER_FILTER
] [userdn=
USER_DN
] [groupfilter=
GROUP_FILTER
] [groupdn=
GROUP_DN
]
The
server
and
basedn
must be provided. The
port
,
login
,
userfilter
, and
groupfilter
default to the
values
636, uid, (objectClass=posixAccount), and (objectClass=posixGroup) respectively. These values may be changed
as required. The other details are optional and are used to further refine the LDAP searches of the directory information.
The
set ldap
command has many examples in its help output. See
help set ldap
for more information.
RMC cli>
help set ldap
Set LDAP configuration.
Note: Strings containing equal signs or spaces must be quoted.
If configuring LDAP for Active Directory, you will need to set the login,
userfilter, and groupfilter parameters because the default values of "uid",
"objectClass=posixAccount", and "objectClass=posixGroup" are insufficient.
If the user entries on the AD server do not contain uidNumber and gidNumber
attributes, you may use the objectSID attribute by setting sid to the
domain value of the server. See the Active Directory example below.
Managing HPE Superdome Flex Server
36
