topic Re: Setting up LDAP on SolidFire 9.3 in SolidFire and HCI

Setting up LDAP on SolidFire 9.3

JMPALUCH13 — Thu, 21 Dec 2017 21:10:07 GMT

I am following the instuctions to setup LDAP on SolidFire but I am gettin gthe error of LDAP search failed when I test a user login. The direct bind option does not work either. I am not sure if the syntax is correct for the settings of Search Bind DN or user DN template. Anybody have any suggestions?

Thanks

Re: Setting up LDAP on SolidFire 9.3

elementx — Mon, 25 Dec 2017 04:12:45 GMT

Can you provide the following info:

a) Element OS version

b) LDAP back end info (AD, OpenLDAP, etc.)

c) Settings you used

Re: Setting up LDAP on SolidFire 9.3

JMPALUCH13 — Tue, 02 Jan 2018 18:17:43 GMT

a) Element OS version --- 9.3

b) LDAP back end info (AD, OpenLDAP, etc.) ---- AD

c) Settings you used

user search filter === (objectClass=person)(sAMAccountName=%USERNAME%))

auth type ==== search and bind

group search type ========= AD

Re: Setting up LDAP on SolidFire 9.3

Sahana — Tue, 09 Jan 2018 08:04:35 GMT

Hi,

Please refer EnableLdapAuthentication on page 168 in https://library.netapp.com/ecm/ecm_get_file/ECMLP2839249

Re: Setting up LDAP on SolidFire 9.3

elementx — Tue, 09 Jan 2018 08:10:51 GMT

As Sahana suggested, take a look at the AD example in the docs.

userSearchBaseDN and few other things you didn't mention are given in there.

It's faster to try by using the API or CLI (PowerShell or Python) because you don't have to click and type a ton of times to retry.

Re: Setting up LDAP on SolidFire 9.3

parisi — Thu, 01 Feb 2018 19:05:35 GMT

There are two places where LDAP can fail - bind and search.

Bind is the login portion, which gives you access to search. Sounds like that's working for you.

Search can fail for a number of reasons:

- wrong search scope

- wrong base DN specified

- incorrect LDAP schema attributes specified

- object doesn't exist/isn't populated with UNIX attributes in AD

There's no way to resolve this issue without the details asked for in previous posts. We'd need the DN specified, the schema being used and Powershell output of the AD object being queried.

For example: Get-ADUser {name} -properties *

Re: Setting up LDAP on SolidFire 9.3

elementx — Sat, 29 Feb 2020 13:28:36 GMT

Video walk-through

https://www.youtube.com/watch?v=IY8ooGMSaOA