mirror of
https://github.com/NetAppDocs/e-series-santricity.git
synced 2026-10-23 03:37:37 +09:00
42 lines
2.0 KiB
Plaintext
42 lines
2.0 KiB
Plaintext
---
|
||
permalink: um-certificates/access-management-with-directory-services-unified.html
|
||
sidebar: sidebar
|
||
keywords: SANtricity, Unified Manager, E-Series, access management, directory services,
|
||
summary: "Administrators can use an LDAP (Lightweight Directory Access Protocol) server and a directory service, such as Microsoft’s Active Directory."
|
||
---
|
||
= Access management with directory services in SANtricity Unified Manager
|
||
:icons: font
|
||
:imagesdir: ../media/
|
||
|
||
[.lead]
|
||
Administrators can use an LDAP (Lightweight Directory Access Protocol) server and a directory service, such as Microsoft's Active Directory.
|
||
|
||
== Configuration workflow
|
||
|
||
If an LDAP server and directory service are used in the network, configuration works as follows:
|
||
|
||
. An administrator logs in to Unified Manager with a user profile that includes Security admin permissions.
|
||
+
|
||
[NOTE]
|
||
====
|
||
The `admin` user has full access to all functions in the system.
|
||
====
|
||
|
||
. The administrator enters the configuration settings for the LDAP server. Settings include the domain name, URL, and Bind account information.
|
||
. If the LDAP server uses a secure protocol (LDAPS), the administrator uploads a certificate authority (CA) certificate chain for authentication between the LDAP server and the host system where the Web Services Proxy is installed.
|
||
. After the server connection is established, the administrator maps the user groups to the local user roles. These roles are predefined and cannot be modified.
|
||
. The administrator tests the connection between the LDAP server and the Web Services Proxy.
|
||
. Users log in to the system with their assigned LDAP/Directory Services credentials.
|
||
|
||
== Management
|
||
|
||
When using directory services for authentication, administrators can perform the following management tasks:
|
||
|
||
* Add a directory server.
|
||
* Edit directory server settings.
|
||
* Map LDAP users to local user roles.
|
||
* Remove a directory server.
|
||
* Change passwords.
|
||
* Set a minimum length for passwords.
|
||
* Allow users to log in without passwords.
|