Novell Sentinel Rapid Deployment 6.1, Installation Manual

Page: 45 / 84

Installing Sentinel 6.1 Rapid Deployment 45
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
8 Enter one of the following:

y
: to accept the entered values

n
: to enter new values

q
: to quit the configuration
On successful configuration:

The LDAP server certificate is added to a keystore named
< Install_Directory >/
config/ldap_server.keystore
.

The
auth.login
and
configuration.xml
configuration files in the
< Install_Directory >/config
directory are updated to enable LDAP authentication.
9 Enter
y
to restart the Sentinel 6.1 Rapid Deployment service.
IMPORTANT: If there are any errors, roll back the changes made to the
auth.login
and
configuration.xml
configuration files in the
< Install_Directory >/config
directory:
cp -p auth.login.sav auth.login
cp -p configuration.xml.sav configuration.xml
10 Log in to Sentinel Control Center as
admin
and perform the following:

Sentinel Rapid Deployment SP1: Specify either of the following, based on the option
you have selected for “Anonymous searches on LDAP directory” on page 44 .

y: Create a LDAP user with the same username as the eDirectory username or Active
Directory sAMAccountName.
 n: Create a LDAP user. The username does not need to be the same as the eDirectory
username or Active Directory sAMAccountName. You must specify the fully
qualified DN of the LDAP user in the
LDAP User DN field.
NOTE: In the previous configuration you had selected
y,
and in the current configuration
if you select
n
for Anonymous searches on LDAP directory :
LDAP subtree to search for users The subtree in the directory that has the user objects.
The following are examples for specifying the subtree
in eDirectory and Active Directory:

eDirectory:
ou=users, o=novell
NOTE: For eDirectory, if no subtree is specified,
then the search is run on the entire directory.

Active Directory:
CN=users, DC=TEST AD, DC=provo,
DC=novell, DC=com
NOTE: For Active Directory, the subtree cannot
be blank.
Filename of the LDAP server
certificate The filename of the eDirectory/Active Directory CA
certificate that you copied in
Step 2 .
Parameter Description/Action