User guide

Using directory services integration 191
NOTE: The information in the Search DN and Search Base fields for dc=parameters must match. For
example, in the Search DN field, if you have dc=widget, in the Search Base field, the dc=parameters must
also say dc=widget.
The Search DN field enables you to define any user in the directory that the console switch uses to log in
to the Directory Service.
NOTE: HP recommends creating a user account specifically for LDAP queries instead of using the admin
account.
After the console switch is authenticated, the Directory Service grants it access to the directory to perform
the user authentication queries, specified on the Query Parameters tab. The default values are
cn=Administrator, cn=Users, dc=yourDomainName, and dc=com and should be modified for your
network environment. For example, to define an administrator DN for test.view.com, enter
cn=Administrator, cn=Users, dc=test, dc=view, dc=com. This is a required field unless the Directory
Service has been configured to allow anonymous search, which is not in the default.
NOTE: A comma must separate each Search DN value.
The Search Password field is used to authenticate the administrator or user specified in the Search DN
field.
The Search Base field enables you to define a starting point from which LDAP searches begin. The default
values are dc=yourDomainName and dc=com and should be modified for your network environment. HP
recommends that the Search Base field be set to the DN of the root of the LDAP Directory Service
namespace. For example, to define a search base for test.com, enter dc=test, dc=com.
NOTE: A comma must separate each Search Base value.
The UID Mask field specifies the search criteria for User ID searches of LDAP servers. The format should be
in the form <name>=<%1>, where <name> is the schema property name in the directory. The default
value is sAMAccountName=%1, which is correct for use with Active Directory. This field is required for
LDAP searches.
Query Parameters tab
NOTE: When the Use LDAP for Authentication Only checkbox is selected, all of the Query Parameters tab
fields are deactivated.
The Query Parameters tab specifies which query method is used to authenticate and authorize the user. It
also specifies the parameters associated with each query method.