User's Manual

286 Using the CMC Directory Service
Selecting Your LDAP Servers
You can configure the server to use with Generic LDAP in two ways. Static
Servers allows the administrator to place a FQDN or IP address within the
field. Alternatively, a list of LDAP servers can be retrieved by looking up their
SRV record within the DNS.
The following are the properties in the LDAP Servers section:
• Use Static LDAP Servers — Selecting this option causes the LDAP service
to use the specified servers with the port number provided (see details
below).
NOTE: You must select Static or DNS.
• LDAP Server Address — Specify the FQDN or IP of the LDAP server. To
specify multiple, redundant LDAP servers that serve the same domain,
provide the list of all servers separated by comma. CMC tries to connect to
each server in turn, until it makes a successful connection.
• LDAP Server Port — Port of LDAP over SSL, default to 636 if not
configured. Non-SSL port is not supported in CMC version 3.0 as the
password cannot be transported without SSL.
• Use DNS to find LDAP Servers — Selecting this option causes LDAP to
use the search domain and the service name through DNS. You must
select Static or DNS.
The following DNS query is performed for SRV records:
_<Service Name>._tcp.<Search Domain>
where <Search Domain> is the root level domain to use within the query and
<Service Name> is the service name to use within the query. For example:
_ldap._tcp.dell.com
where ldap is the service name and dell.com is the search domain.
Network Timeout
(seconds)
Sets the time in seconds after which an idle LDAP
session is automatically closed.
Search Timeout (seconds) Sets the time in seconds after which a search is
automatically closed.
Table 8-10. Common Settings
(continued)
Setting Description