Novell Sentinel Rapid Deployment 6.1, Installation Manual

Page: 82 / 84

82 Sentinel 6.1 Rapid Deployment Installation Guide
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
The completed
LdapLogin
entry looks similar to the following:
5 Save
auth.login
.
6 Use the Java* keytool program available at
<sentinel base>/jre/bin/keytool
to create a
java keystore named
ldap_auth.keystore
by running the following command:
keytool -importcert -noprompt -trustcacerts -file <edir cert filename> -
keystore ldap_auth.keystore -storepass sentinel
7 Open the
configuration.xml
in an editor:
vi configuration.xml
8 Edit the DAS_Core process element's "
image
" attribute and add the following:
-Djavax.net.ssl.trustStore=../config/ldap_auth.keystore
-Djavax.net.ssl.trustStorePassword=sentinel
9 Save the
configuration.xml
file.
10 Restart the Sentinel server.
11 After the configuration is completed, create users with passwords in eDirectory by using
iManager or in Active Directory by using Microsoft* Management Console to test the LDAP
Authentication.
12 Login to the Sentinel Control Center as the admin user and create a domain user with same
username either as the eDirectory username or the Active Directory sAMAccountName.
After configuration, you can login to the Sentinel Control Center by using the LDAP username and
password.
LDAP Service Entry
eDirectory
LdapLogin {
com.sun.security.auth.module.LdapLoginModul
e required
userProvider="ldap://
192.168.0.1 :636/
o=users"
userFilter="(&(uid={USERNAME})(objectclass=
inetOrgPerson))"
useSSL=true;
}
Active Directory LdapLogin {
com.sun.security.auth.module.LdapLoginModul
e required
userProvider="ldap://
137.65.151.12 :636/
CN= Users ,DC= test-
AD ,DC= provo ,DC= novell ,DC= com "
userFilter="(&(sAMAccountName={USERNAME})(o
bjectclass=user))"
useSSL=true;
};