Harmonic MediaGrid - Page 134

Chapter 4 System Configuration
© 2017 Harmonic Inc. All rights reserved. 134 Harmonic MediaGrid Release 4.1
Joining a Harmonic MediaGrid Cluster to a Lightweight Directory Access Protocol
(LDAP) Domain
b. Replace ldap_FQDN with the Fully Qualified Domain Name of the LDAP server.
4. Repeat steps 1-3 for all remaining ContentDirectors in the Harmonic MediaGrid cluster.
Joining the ContentBridge 1000B to the LDAP Domain
1. Log on to the ContentBridge using the following user name and password:
User name: root
Password: omneon
2. Stop smb service
service smb stop
3. Remove samba private files on the ContentBridge:
rm -f /var/lib/samba/private/*
4. Copy Samba configuration file from the ContentDirector generated in step 3 in subsection
above. You may be required to enter “sudo” when copying files over.
Copy
/tftpboot/config/gateway/smb.conf from the ContentDirector to /etc/samba/smb.conf on
the ContentBridge.
5. Run the following command:
net rpc join -U<ldap_admin>%<ldap_admin_password> -S <ldap_FQDN>
NOTE: Upon joining the LDAP domain, the Samba server creates a local temporary database on the
ContentBridge 1000B at: /var/lib/samba/private/secrets.tdb.
6. Remove any “CB” entries that provide access to individual users from the/etc/passwd file
locally on the ContentBridge and <CLBHOSTNAME> file under /tftpboot/config/gateway on
all ContentDirectors.
Open
/etc/passwd and delete entries for the same individual users (the entries do not contain
“CB” in this file).
NOTE: In order to access the Harmonic MediaGrid, the individual users must be added to the LDAP
domain.
7. Add the following line to the ContentBridge configuration file. This can be done via
SystemManager or by editing /tftpboot/config/gateway/<hostname> manually on ALL
ContentDirectors.
NATIVE <Cluster IP or DNS name> <file system name>
Replace <hostname> with the hostname of the ContentBridge.
8. Restart the gateway service:
service gateway restart
9. Repeat steps 1-8 for all remaining ContentBridges in the Harmonic MediaGrid cluster.
Verifying Communication with the Domain Controller
Follow the steps described in Verifying Communication with the Domain Controller.
NOTE: Make sure the Harmonic MediaGrid cluster is also configured with LDAP.
NOTE: In order to access the Harmonic MediaGrid, the individual users must be added to the LDAP
domain.