Specifications

Table 4‑2. Active Directory as an LDAP Server and OpenLDAP Settings
Field Description
Name Name of the identity source.
Base DN for users Base domain name for users.
Domain name FDQN of the domain, for example, example.com. Do not
provide an IP address in this field.
Domain alias For Active Directory identity sources, the domain's
NetBIOS name. Add the NetBIOS name of the Active
Directory domain as an alias of the identity source if you
are using SSPI authentications.
For OpenLDAP identity sources, the domain name in
capital letters is added if you do not specify an alias.
Base DN for groups The base domain name for groups.
Primary Server URL Primary domain controller LDAP server for the domain.
Use the format ldap://hostname:port or
ldaps://hostname:port. The port is typically 389 for ldap:
connections and 636 for ldaps: connections. For Active
Directory multi-domain controller deployments, the port is
typically 3268 for ldap: connections and 3269 for ldaps:
connections.
A certificate that establishes trust for the LDAPS endpoint
of the Active Directory server is required when you use
ldaps:// in the primary or secondary LDAP URL.
Secondary server URL Address of a secondary domain controller LDAP server
that is used for failover.
Username ID of a user in the domain who has a minimum of read-
only access to Base DN for users and groups.
Password Password of the user who is specified by Username.
Assign Permissions in the vSphere Web Client
After you create users and groups and define roles, you must assign the users and groups and their roles to
the relevant inventory objects. You can assign the same permissions at one time on multiple objects by
moving the objects to a folder and setting the permissions on the folder.
Permissions assigned from the vSphere Web Client must match permissions, including case, in
ActiveDirectory precisely. If you upgraded from earlier versions of vSphere, check for case inconsistencies if
you experience problems with groups.
Prerequisites
Permissions.Modify permission on the parent object of the object whose permissions you want to modify.
Procedure
1 Browse to the object in the vSphere Web Client object navigator.
2 Click the Manage tab and select Permissions.
3 Click Add Permission.
4 Click Add.
vSphere Upgrade
106 VMware, Inc.