Chapter 4
Configuring Skybox Appliance
Skybox version 11.7.100
24
Prerequisites
To use LDAP authentication, the LDAP server must support either TLS/SSL or secure LDAP
(LDAPS).
To set up LDAP authentication
1. On the Security tab, click LDAP.
2. Define the authentication according to the fields shown in the following table.
FIELD
DESCRIPTION
LDAP Servers
URI
A comma-separated list of LDAP servers against which to authenticate. The format
of the URI must match the format defined in RFC 2396:
ldap[s]://<server>[:<port>]
where
<server>
is the IP address or name of the LDAP server
The default ports are:
l
389 for regular LDAP
l
636 for LDAPs
Force SSL
Certification
Specifies whether to enable authentication for SSL certification (LDAPS).
Certificate
Authorities
Certificates
If you are using SSL certification, a list of the CA chains needed to certify the LDAP
servers. Start each certificate on a new line.
For example:
-----BEGIN CERTIFICATE-----
...
...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...
...
-----END CERTIFICATE-----
Note: The certificates must be in PEM format.
LDAP Search
Base
The default base DN to use for performing LDAP search operations.
The syntax must be in DN format. For example,
CN=Users,DC=YOURDOMAIN,DC=LOCAL
LDAP
Schema
Select the schema type used on the target LDAP server.
The default attribute names retrieved from LDAP servers may vary according to the
schema type. The way that attributes are handled may also differ. The main
difference between the schema types is how group memberships are recorded in the
server.
l
The Active Directory schema type sets the attributes to correspond with Active
Directory 2008r2 values.
l
With rfc2307, group members are listed by name in the member
uid
attribute.
l
With rfc2307bis and IPA, group members are listed by DN and stored in the
member attribute.
LDAP Bind
The user bind DN to use for performing LDAP operations. This user needs to have
