Veritas NetBackup™ Virtual Appliance Documentation

To add or modify an LDAP server configuration

1. Log on to the NetBackup Virtual Appliance Shell Menu and navigate to the Settings > Security > Authentication > LDAP view.
2. Set the LDAP configuration parameters with the ConfigParam command. Enter the configuration information based on the following command options:

   * Required parameters

   Option	Description
   *ConfigParam Set host <server_name or IP>	Enter the FQDN or the IP address of your LDAP server. Note: The specified LDAP server should comply with RFC2307bis. The RFC2307bis specifies that hosts with IPv6 addresses must be written in their preferred form, such that all components of the address are indicated and leading zeros are omitted.
   *ConfigParam Set base <base_DN>	Enter the base directory name which is the top level of the LDAP directory tree.
   ConfigParam Set binddn <bind_DN>	Enter the bind directory name. The bind DN is used as an authentication to externally search the LDAP directory within the defined search base.
   ConfigParam Set bindpw <password>	Enter the password to access the LDAP server.
   ConfigParam Set userList <user_name(s)>	Enter the name of an existing LDAP user on your LDAP server. To enter multiple users, separate each user name with a comma (,).
   ConfigParam Set groupList <group_name(s)>	Enter the name of an existing LDAP user group on your LDAP server. To enter multiple groups, separate each group name with a comma (,).
   *ConfigParam Set ssl <No|Yes|StartTLS>	Decide between the following SSL certificate options for your LDAP server. No - Select to continue configuring the LDAP server without the SSL certificate Yes - Select to enable adding an SSL certificate StartTLS Note: When you use the StartTLS and Yes options during LDAP configuration, the initial setup is done over a non-SSL channel. After the LDAP connection and initial discover phase is over, the SSL channel is turned on. Even at this phase, the established SSL channel doesn't do the server-side certificate validation. This validation starts after the server's root certificate is explicitly set using the LDAP > Certificate Set command. See Setting the SSL certification for LDAP on the NetBackup Virtual Appliance.
   ConfigParam Set directoryType <directoryType>	Select the LDAP directory type from the drop-down list. The available options are: OpenLDAP ActiveDirectory Others Select OpenLDAP if you use a typical OpenLDAP directory service. Select ActiveDirectory if you use AD as an LDAP directory service. Select Others if you use a different type of LDAP directory service.

   Note:

   The userList and groupList options are not required to complete LDAP configuration. However, if you do not configure those options, no LDAP users or LDAP groups appear under the LDAP > List command until you manually add them.

   If you need to delete a parameter that you have already set, use the ConfigParam Unset <parameter> command, where <parameter> is the option that you want to delete.

3. Verify the information that you entered with the ConfigParam Show command.
4. If you are adding a new LDAP server configuration, use the Configure command to complete the configuration and enable LDAP authentication on the appliance.