User`s guide

254 XgOS User’s Guide • September 2014
Using Active Directory as the IMS
Microsoft Active Directory (AD) uses either Kerberos or simple (default) user
authentication. You can configure up to two AD servers: one primary and one
secondary. These two servers act as an active server and a hot standby in case of
failures.
When using AD as the IMS, use the following process:
1. Set up the necessary user accounts as described in “Configure AD Users and
Roles” on page 255.
2. You must set up these accounts before configuring the AD server in the Oracle
Fabric Interconnect.
3. Configure the AD server in XgOS as described in “Example: Active Directory
Server With Default Authentication” on page 256 or “Example: Configure
Kerberos as a Secondary AD Server” on page 257
4. Set the IMS to the configured server.
5. For an example, see “Example: Set IMS to an AD Server” on page 258.
Syntax
add ims ad-server <server-name> <host[:port]> <user-dn> -domain-represented-by
-formal-user-dn -server-mode={primary|secondary}
add ims ad-server <server-name> <host[:port]> <user-dn> -domain-represented-by
-formal-user-dn -server-mode={primary|secondary} kerberos -default-realm
-default-domain -kdc-host-name
remove ims ad-server <name>
set ims ad-server <name> [up|down] -authentication-type={simple|kerberos}
-base-dn -descr -domain-represented-by-formal-user-dn -host-name -password
-port -server-mode={primary|secondary} -user-dn
show ims [-detail]
show ims ad-server [<name>|*][-detail]