IBM Storwize V7000, Руководство пользователя

Страница: 84 / 152

Table 43. LDAP configuration information
Field Value Note
LDAP SERVER IP
ADDRESS
_____._____._____._____
_____._____._____._____
This is the numeric IP address of the remote
LDAP server on your network.
SECURITY METHOD [ ] Off
[ ] SSL (Secure Sockets Layer)
[ ] TLS (Transport Layer Security)
The communications link between the Storwize
V7000 Unified system and your LDAP server
may be open (unencrypted), or may be secured
(encrypted). If secured, one of two methods is
used: SSL or TLS.
Note: When SSL or TLS is used, a security
certificate file must be copied from your LDAP
server to the Storwize V7000 Unified
Management Node.
Certificate Path If the SSL method is Off, leave this field blank.
If the SSL method is SSL or TLS, record the path
on the Storwize V7000 Unified Management
Node where you copy the Certificate file. As an
example, if the Certificate File is cacert.pem and
you store it in a directory called /certificates,
then record
/certificates/cacert.pem .
User Suffix Specifies the LDAP user suffix to be used.
Group Suffix Specifies the LDAP group suffix to be used.
Bind Distinguished
Name This is the bind distinguished name from the
/etc/openldap/slapd.conf file on your LDAP
server. In the example following note 1 below,
the bind distinguished name is
cn=Manager,dc=v7kuldap,dc=com
Bind Password This is the bind password from the
/etc/openldap/slapd.conf file on your LDAP
server. In the example following note 1 below,
the bind password is
secret.
Kerberos Server Name If you checked Kerberos in the Options field of
Table 41 on page 62, you must complete this
field. If you did not check Kerberos, leave this
field blank. This field is the name of the
Kerberos server used with your LDAP
environment.
Kerberos Realm If you checked Kerberos in the Options field of
Table 41 on page 62, then you must complete
this field. If you did not check Kerberos, leave
this field blank. This field is the Realm for the
Kerberos server used with your LDAP
environment.
Kerberos Keytab File If you checked Kerberos in the Options field of
Table 41 on page 62, then you must complete
this field. If you did not check Kerberos, leave
this field blank. This field is the file name for
the Kerberos KeyTab file.
64
IBM Storwize V7000 Unified: Adding Storwize V7000 File Modules to an existing Storwize V7000 system 2073-720