Oracle ZFS Storage Appliance User Manual

Configuring LDAP Security Settings (CLI)
7.
Refer to the following table for valid security property setting combinations.
cred_level auth_method use_tls
none trueanonymous
none false
self sasl/GSSAPI false
simple true
simple false
Permitted, but not recommended because
the user's distinguished name (DN) and
password will be sent in plain text.
sasl/DIGEST-MD5 true
proxy
sasl/DIGEST-MD5 false
Related Topics
■
“LDAP Properties” on page 290
LDAP Properties
For the appropriate settings for your environment, consult your LDAP server administrator.
Schema
■
Base search DN - Supplies the distinguished name of the base object which is the starting
point for directory searches.
■
Search scope - Defines which objects in the LDAP directory are searched, relative to the
base object. Search results can be limited only to objects directly beneath the base search
object (one-level) or they can include any object beneath the base search object (subtree).
The default is one-level.
■
Schema definition - Schema used by the appliance. This property lets administrators
override the default search descriptor, attribute mappings, and object class mappings
for users, groups, and netgroups. For more information, see “LDAP Custom
Mappings” on page 291.
Security Settings
■
Authenticate As - Credentials used to authenticate the appliance to the LDAP server.
■
Enable SSL/TLS - Toggles TLS (Transport Layer Security, the descendant of SSL) to
establish secure connections to the LDAP server. If authenticating as Self, this option is
unavailable because Self uses Kerberos encryption.
290 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016

Oracle ZFS Storage Appliance Specifications

General

Connectivity	10GbE, 40GbE, InfiniBand, Fibre Channel
Protocols	NFS, SMB, iSCSI, Fibre Channel, HTTP
Operating System	Oracle Solaris
Data Protection	snapshots, clones, remote replication
Data Reduction	Inline compression, deduplication
High Availability	Redundant hardware components (controllers, power supplies, fans). Automatic failover between controllers. Hot-swappable drives and components. Cluster configurations for increased availability and scalability.
Management Interface	Web-based GUI, CLI, REST API
Storage Type	Hybrid (SSD + HDD), All-Flash
Storage Capacity	Up to several petabytes
Encryption	AES-256 encryption at rest