Quantum Scalar i40, User Manual

Page: 114 / 328

Chapter 4: Configuring the Library
Working With LDAP User Accounts (Remote Authentication)
88 Quantum Scalar i40 and Scalar i80 User’s Guide
Enabling and
Configuring LDAP on
the Library
Administrative users can enable and configure Lightweight Directory
Access Protocol (LDAP). LDAP is the industry standard Internet protocol
that provides centralized user account management.
Administrative users can add, delete, and modify only local user account
information. The library Web client does not allow you to create,
modify, or delete user account information on an LDAP server. This must
be done by the directory service provider. For more information on
working with local user accounts, see Working With Local User Accounts
on page 78.
You can configure the Lightweight Directory Access Protocol (LDAP)
settings any time after the initial library configuration. If you want to
configure Kerberos, follow the LDAP configuration steps below, and also
see Configuring Kerberos on page 90.
Before configuring LDAP, obtain the following LDAP parameters from
your network administrator. The items marked “optional” may or may
not be needed; if in doubt, ask your administrator.
• Repository URI — The Uniform Resource Identifier (URI) of the LDAP
server where user account information is stored. The URI includes
the LDAP server host name or IP address and can include the LDAP
server network port. Port 389 is the default.
• Group DN (optional) — A group distinguished name (DN) made up
of one or more parameters.
• User DN (optional) — A user DN made up of one or more
parameters.
• Default domain — Domain that is populated on the login screen by
default.
• Principle authorization — Login used to gain access to the directory
service.
• Credential authorization — Password for the principal
authentication login.
• Library user group — Name of the group you want to associate with
the library. This group is equivalent to the local user privilege level
(see Privilege Levels on page 80). Any member of this group can
manage this library.
• Admin group — Name of the group associated with the library
administrator, equivalent to the local administrative user privilege