Configuring an external LDAP server — Windows

Last Updated : Aug 02, 2022 |

Procedure

  1. Install the Identity Management for UNIX component on Windows 2003 R2. This can be found under Add/Remove Windows Components, then double click on Active Directory Services.
  2. Follow these steps to create an AES group.
    1. Click Start > Run.
    2. Type dsa.msc.
    3. Click OK.
    4. In the Active Directory Users and Computers dialog box, right click Builtin > New > Group.
    5. In the New Object — Group dialog box, in Group name, type AES.
    6. Click OK.
    7. Optional Open the AES Group property, and click the UNIX Attributes tab.
    8. Optional From the NIS Domain drop-down box, select the NIS domain to which this group belongs.
    9. Optional Click OK.
  3. Optional Follow these steps to configure the user’s UNIX attributes.
    1. Create a user or use an existing user.
    2. Open the User Properties dialog box.
    3. Click the UNIX Attributes tab.
    4. In NIS Domain, select the appropriate NIS domain.
    5. From the Primary group name/GID drop-down box, select AES.
    6. Click OK.
  4. Follow these steps to set up user roles. See User roles for a list of user roles and corresponding privileges.
    1. Create an attribute or use an existing attribute on LDAP with the value Security_administrator,Auditor.
      Note:

      If the user has multiple roles, use a comma for the delimiter. For example, Audit,System_Administrator,Security_Administrator,Backup_restore.

    2. In the <user>SecurityAdmin Properties dialog box, in Description, type Security_administrator,Auditor.
    3. Click OK.
  5. Follow these steps to configure Enterprise Directory.
    1. Log in to the AE Services as a system administrator.
    2. On the AE Services management console menu, go to Security > Enterprise Directory.
    3. On the Enterprise Directory page, in User Role Attribute Name, type description.

      This field is the name of the user attribute which contains the user roles in LDAP.

  6. Follow these steps to enable external LDAP.
    1. Log in to the AE Services management console as a system/security administrator.
    2. On the AE Services management console menu, go to Security > PAM > PAM Password Manager.
    3. On the PAM Password Manager Configuration page, select External LDAP.
    4. Click Apply.