•
(Optional) Set the CA certificate using the following command:
◦
setauthparam ladp-ssl-cacert <certificate>
•
Configure account location parameters using the following commands:
setauthparam accounts-dn <DN_path>
◦
◦
setauthparam account-obj user
◦
setauthparam account-name-attr sAMAccount
◦
setauthparam memberof-attr memberOf
◦
checkpassword <user_name>
•
Configure group-to-role mapping parameters using the following commands:
setauthparam <map_param> <map_value>
◦
◦
checkpassword <user_name>
Each step in the process above is discussed in the following sections. Each section is followed by
an example showing the implementation of the instructions described.
Configuring Connection Parameters
To configure connection parameters:
1.
If not already known, obtain the LDAP server’s host name by running the
ldapsearch
command or using
ldp.exe
(available as part of the downloadable Windows Support Tools
from Microsoft). You must know the LDAP server’s IP address.
NOTE:
If you do not have access to the
ldapsearch
command, use the
ldp.exe
command.
•
Issue the
ldapsearch
command and record the displayed
dnsHostName
(the value
used for the
ldap-server-hn
parameter; this is only necessary when setting CA
certificates).
•
Run
ldp.exe
as follows:
1.
Click
Start
→
Run
.
2.
In the
Open
box, enter
ldp
and click
OK
.
3.
The
Ldp
window opens.
4.
In the
Ldp
window, click
Connection
→
Connect
.
5.
In the
Server
box, enter the Active Directory server’s IP address and click
OK
.
The root DSE attributes and values are displayed in the right-side pane.
6.
Record the displayed
dnsHostName
(the value used for the
ldap-server-hn
parameter; only necessary if setting CA certificates).
2.
Set the address to which the LDAP server will connect by issuing the
setauthparam
ldap-server <IP_address>
command, where
<IP_address>
is your LDAP server’s IP
address.
28
Managing User Accounts and Connections
