Novell Sentinel Rapid Deployment 6.1, Installation Manual

Page: 47 / 84

Installing Sentinel 6.1 Rapid Deployment 47
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
8 Start the Sentinel service.
/etc/init.d/sentinel start
4.9.3 LDAP Authentication without Performing Anonymous
Searches
In Active Directory, you can use the
userPrincipalName
attribute to search for user objects to
perform LDAP authentication without performing anonymous searches on the LDAP directory.
1 Ensure that the
userPrinicipalName
attribute is set to < sAMAccountName@domain > for the
Active Directory user.
For more information, see
User-Principal-Name Attribute (http://msdn.microsoft.com/en-us/
library/ms680857(VS.85).aspx) .
2 Perform either of the following, based on the installation:
Sentinel Rapid Deployment SP1: Run the
ldap_auth_config.sh
script, and select
n
for
“Anonymous searches on LDAP directory” on page 44 .
Sentinel Rapid Deployment Hotfix 2: Run the
ldap_auth_config.sh
script.
3 In Sentinel Control Center, open User Manager, then create an LDAP user.
Sentinel Rapid Deployment SP1: The LDAP User DN must be the same as the Active
Directory sAMAccountName.
Sentinel Rapid Deployment Hotfix 2:The LDAP User Name must be the same as the Active
Directory sAMAccountName.
4 On the Sentinel Rapid Deployment server, edit the
LdapLogin
section in the
< Install
Directory >/config/auth.login
file:
LdapLogin {
com.sun.security.auth.module.LdapLoginModule required
userProvider="ldap:
//LDAP server IP:636/DN of the Container that
contains the user objects "
authIdentity="{USERNAME}@ Domain Name "
userFilter="(&(sAMAccountName={USERNAME})(objectclass=user))"
useSSL=true;
};
For example:
LdapLogin {
com.sun.security.auth.module.LdapLoginModule required
userProvider="ldap:
//137.65.151.12:636/DC=Test-
AD,DC=provo,DC=novell,DC=com "
authIdentity="{USERNAME}@ Test-AD.provo.novell.com "
userFilter="(&(sAMAccountName={USERNAME})(objectclass=user))"
useSSL=true;
};
5 Restart the Sentinel service:
/etc/init.d/sentinel stop
/etc/init.d/sentinel start