Veritas NetBackup™ Appliance Administrator's Guide

To configure an LDAP server

1. Log on to the NetBackup Appliance Web Console.
2. Click Settings > Authentication >LDAP to expand the LDAP Server Configuration.
3. Select Add new configuration.

   The appliance displays the fields to create a new configuration.

4. Enter the configuration information based on the following fields:

   Field	Description	Example
   Server Name/IP	Enter the FQDN or IP address of your LDAP server. Note: The specified LDAP server should comply with RFC2307bis. The RFC2307bis specifies that hosts with IPv6 addresses must be written in their preferred form, such that all components of the address are indicated and leading zeros are omitted.
   Base DN	Enter the base directory name which is the top level of the LDAP directory tree.	OU= ExampleUsers, dc= mydomain
   Bind DN	Enter the bind directory name. The Bind DN is used as an authentication to externally search the LDAP directory within the defined search base.	DC=com
   Password	Enter the password to access the LDAP server.
   Common User Name	Enter the name of an existing LDAP user on your LDAP server.	NBUApplianceAdmin
   Common Group Name	Enter the name of an existing LDAP user group on your LDAP server.
   SSL Certificate Required	Displays a drop-down list to enable SSL certificate for your LDAP server. The drop-down list displays the following options: Yes - Select to enable adding an SSL certificate No - Select to continue configuring the LDAP server without the SSL certificate Start TLS Note: When you use the Start TLS and Yes options during LDAP configuration, the initial setup is done over a non-SSL channel. After the LDAP connection and initial discover phase is over, the SSL channel is turned on. Even at this phase, the established SSL channel doesn't do the server-side certificate validation. This validation starts after the server's root certificate is explicitly set using the Set Certificate option. For more information, refer to See Setting the SSL certification.
   Directory Type	Select the LDAP directory type from the drop-down list. The available options are: OpenLDAP ActiveDirectory Others Select OpenLDAP if you use a typical OpenLDAP directory service. Select ActiveDirectory if you use AD as an LDAP directory service. Select Others if you use a different type of LDAP directory service.
   Validate UIDs and GIDs for Conflicts	Select the check-box to validate the User IDs and Group IDs and identify conflicting entires between the NetBackup appliance and the LDAP server.

   Note:

   The Common User Name and Common Group Name fields are not required to complete LDAP configuration. However, if you do not complete those fields, no LDAP users or LDAP groups appear under Settings > Authentication > User Management until you manually add them.

5. Click Configure to configure LDAP authentication using the entered parameters.

   The appliance configures and enables the new LDAP server and displays the Attribute Mappings and Configuration Parameters table.

   Note:

   When the directory type is ActiveDirectory and the Settings > Security > Authentication > LDAP > Users Add command is used to add an LDAP user, you must use the following command to add the groups that the user belongs to on the LDAP server to the appliance: Settings > Security > Authentication > LDAP > Groups Add