Chapter 4 Configuring the Appliance
Skybox version 10.1.200
25
Field
Description
Certificates
needed to certify the LDAP servers. Start each certificate on a
new line.
Example:
-----BEGIN CERTIFICATE-----
...
...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...
...
-----END CERTIFICATE-----
Note: The certificates must be in PEM format.
LDAP Search Base
The default base DN to use for performing LDAP search
operations.
The syntax must be in DN format.
Example:
CN=Users,DC=YOURDOMAIN,DC=LOCAL
LDAP Schema
Select the schema type used on the target LDAP server.
The default attribute names retrieved from LDAP servers may
vary according to the schema type. The way that some
attributes are handled may also differ. The main difference
between the schema types is how group memberships are
recorded in the server.
•
The Active Directory schema type sets the attributes to
correspond with Active Directory 2008r2 values.
•
With rfc2307, group members are listed by name in the
member
uid
attribute.
•
With rfc2307bis and IPA, group members are listed by DN
and stored in the member attribute.
LDAP Bind User DN
The user bind DN to use for performing LDAP operations. This
user needs to have read permissions to read the user groups.
Example:
CN=LDAPUser,CN=Users,DC=YOURDOMAIN,DC=LOCAL
LDAP Bind User
Password
The password for the bind user.
Verify LDAP Bind
User Password
Verify the user password.
Allowed Users
A comma-separated list of permitted users. If empty, all users
are permitted.
Allowed Groups
A comma-separated list of permitted groups. If empty, all
groups are permitted.
After LDAP authentication is set up, the permitted users can log in to the
Appliance web or SSH interfaces using their LDAP user name and password.
Changing the TLS version
The Apache HTTP Server module
mod_ssl
provides an interface to
the OpenSSL library, which provides Strong Encryption using the Secure Sockets
Layer and Transport Layer Security (TLS) protocols.
