Adding an Appliance Administrator (BUI)
■
LDAP users can be granted privileges for appliance administration. The appliance
supplements LDAP information with its own privilege settings.
■
The LDAP server's certificate can be self-signed.
■
You cannot supply a list of trusted CA certificates; each certificate must be individually
accepted by the appliance administrator.
■
When an LDAP server's certificate expires, you must delete the server from the list and then
add it again to accept its new certificate.
Note - UIDs from 0-99 inclusive are reserved by the operating system vendor for use in future
applications. Their use by end system users or vendors of layered products is not supported and
can cause security issues with other applications.
To configure LDAP, see the following sections:
■
“Adding an Appliance Administrator (BUI)” on page 286
■
“Setting Properties with Multiple Attribute Value Pairs (CLI)” on page 287
■
Configuring LDAP Security Settings - BUI, CLI
■
“LDAP Properties” on page 290
■
“LDAP Custom Mappings” on page 291
Adding an Appliance Administrator (BUI)
To let an existing LDAP user log in using LDAP credentials and administer the appliance, use
the following procedure.
Note - If both NIS and LDAP are configured on the appliance and the services return different
information for a particular item, the appliance will use the data provided by NIS.
1.
Go to Configuration > Services > LDAP, and enter the properties that you want to
use.
For information about the available properties, see “LDAP Properties” on page 290.
2.
To apply properties you selected, click Apply or click Revert to start over.
3.
To add LDAP servers, in the Servers section click the add item icon .
For information about servers, see the Servers section in “LDAP Properties” on page 290.
4.
To configure the LDAP server, in the New LDAP Server box, enter the LDAP
server Address and select the LDAP Certificate source that you want to use.
286 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
To Next Page
Loading...
Need help?
General
