Authentication Types - LDAP
Form Fields
-
Name - The name of the authentication profile.
-
Status - The status of the authentication profile.
-
Primary Server - Primary server to be used for LDAP.
-
Secondary Server - Failover server to be used for LDAP.
-
Distinguished Name - Specific to your organization, and use "%s" for username. For example:
CN=%s,CN=Users,DC=example,DC=com -
Secure Connection - Connect over a secure connection. The options are:
-
None
-
LDAPS - Secure on connection
-
TLS - Negotiated
-
-
Port - Port to be used for LDAP.
Best Practices
To set up LDAPS external authentication:
-
Get the CA certificate (or self-signed one) for the LDAP server and place it in $A1BASEDIR/etc/ssl.
-
Create $A1BASEDIR/etc/ldap.conf with the following two lines. Update $A1BASEDIR with the Unified Assurance install directory (e.g. /opt/assure1) and $LDAP_CA_CERT with the exact name of the CA cert (e.g. OCUACA.pem):
TLS_REQCERT never TLS_CACERT $A1BASEDIR/etc/ssl/$LDAP_CA_CERT -
Restart the Unified Assurance web service:
systemctl restart assure1-web
Reference
LDAP - Lightweight Directory Access Protocol is a lightweight client-server protocol for accessing directory services.