NOTE:
The examples used to illustrate the procedures described for Active Directory LDAP
configuration with SASL binding specifically use GSSAPI as the SASL binding mechanism.
As you will see, a single user is used to determine group hierarchies and path structures used in
the system, which are then used to complete the LDAP configuration.
Configuring Connection Parameters
To configure connection parameters:
1.
If not already known, obtain the LDAP server’s host name and Kerberos server information by
running the
ldapsearch
command or using
ldp.exe
(available as part of the downloadable
Windows Support Tools from Microsoft). You must know the LDAP server’s IP address.
NOTE:
If you do not have access to the
ldapsearch
command, use the
ldp.exe
command
shown below.
•
Issue the
ldapsearch
command and record the displayed
dnsHostName
(the value
used for the
ldap-server-hn
parameter) and
ldapServiceName
(the value used for
the
kerberos-realm
parameter) attributes for later use.
•
Run
ldp.exe
as follows:
1.
Click
Start
→
Run
.
2.
In the
Open
box, enter
ldp
and click
OK
.
3.
The
Ldp
window opens.
4.
In the
Ldp
window, click
Connection
→
Connect
.
5.
In the
Server
box, enter the Active Directory server’s IP address and click
OK
.
The root DSE attributes and values are displayed in the right-side pane.
NOTE:
In
ldp.exe
, the Kerberos realm is the portion of the
ldapServiceName
value that follows the “at” (@) sign and terminates before the semi-colon (;).
In
ldapsearch
output, the Kerberos realm is the portion of the ldapServiceName
value that follows the “at” (@) sign.
6.
Record the displayed
dnsHostName
(the value used for the
ldap-server-hn
parameter) and
ldapServiceName
(the value used for the
kerberos-realm
parameter) attributes for later use.
2.
Set the address to which the LDAP server will connect by issuing the
setauthparam
ldap-server <IP_address>
command, where
<IP_address>
is your LDAP server’s IP
address.
3.
Set the LDAP server’s host name by issuing the
setauthparam ldap-server-hn
<DNS_HostName>
command, where
<DNS_HostName>
is the value displayed by either
using the
ldapsearch
command or
ldp.exe
in
Step 1
.
Configuring LDAP Connections
23