Symantec 5 manual VCS node authentication broker

Installing and configuring VCS 79

Installing and configuring VCS 5.0 RU3

Figure 4-2 Client communication with LDAP servers

VCS client

1.When a user runs HA commands, AT initiates user authentication with the authentication broker.

2.Authentication broker on VCS node performs an LDAP bind operation with the LDAP directory.

4.AT issues the credentials to the user to proceed with the command.

VCS node (authentication broker)

3.Upon a successful LDAP bind, AT retrieves group information from the LDAP direcory.

LDAP server (such as

OpenLDAP or Windows

Active Directory)

See the Symantec Product Authentication Service Administrator’s Guide.

The LDAP schema and syntax for LDAP commands (such as, ldapadd, ldapmodify, and ldapsearch) vary based on your LDAP implementation.

Before adding the LDAP domain in Symantec Product Authentication Service, note the following information about your LDAP environment:

■The type of LDAP schema used (the default is RFC 2307)

■UserObjectClass (the default is posixAccount)

■UserObject Attribute (the default is uid)

■User Group Attribute (the default is gidNumber)

■Group Object Class (the default is posixGroup)

■GroupObject Attribute (the default is cn)

■Group GID Attribute (the default is gidNumber)

■Group Membership Attribute (the default is memberUid)

■URL to the LDAP Directory