Brocade Communications Systems IP250 Select Ldap Server from the Primary Authentication list

AAA Settings tab 12

NOTE

If the LDAP server’s IP address is entered in the Management application, the LDAP server’s hostname (if any) must still be known to the Management application host OS. The Management application server must be using a DNS server that knows the LDAP server’s hostname, or you must manually add the LDAP server’s hostname to the local hosts file (for Linux the file is located in /etc/hosts and for Windows the file is located in C:\Windows\System32\drivers\etc\hosts for Windows).

To configure an LDAP server for authentication, complete the following steps.

1.Select the AAA Settings tab.

2.Select LDAP Server from the Primary Authentication list.

If you configure the external LDAP server as the primary authentication server, make the following preparations first:

•Make sure that the external LDAP server and its user accounts have been properly configured (refer to “Creating an AD user account” on page 203). For example, you must define roles and areas of responsibility (AOR) in the external server to match the Management application roles and AOR.

•Make sure to configure the custom attributes “NmRoles” and “NmAors” on the LDAP server (refer to “Configuring roles and AORs on the external LDAP server” on page 204). NmRoles defines the Management application user roles (such as Host Administrator, IP System Administrator, Network Administrator, Operator, Report User Group, SAN System Administrator, Security Administrator, Security Officer, and Zone Administrator). NmAors defines the areas of responsibility (such as, All Fabrics, All IP Products).

3.Add or edit a LDAP server by referring to “Configuring an LDAP server” on page 384. The LDAP Servers and Sequence table displays the following information:

•Network Address — The network address of the LDAP server.

•Authentication Type — The authentication type (such as, CHAP).

•Security — Whether or not security is enabled.

•TCP Port — The TCP port number of the LDAP server.

•TimeOut (Sec) — The timeout value in seconds specified when sending an authentication request to the server. Default is 3.

•Attempts — The number of attempts made to reach a server before determining it is unreachable. Default is 3.

4.Rearrange the LDAP servers in the table by selecting a server and click the Up or Down button to move it.

5.Delete a LDAP server by selecting the server and click Delete.

6.Test the established active connection with the LDAP server by clicking Test. The Test Authentication dialog box displays.

7.Enter your user name and password and click OK.

Test attempts to contact the LDAP server by issuing a ping command and verifies the following:

•Verifies connections to the LDAP Server

•Verifies authentication with the LDAP Server

Brocade Network Advisor IP User Manual	383
53-1003056-01