Users Guide

Table 14. Directory settings options (continued)
Option Description
● Directory Service CA Certificate Information
Upload Directory Service CA Certificate Click Choose File to navigate to the location on the system where the CA
certificate is located, select the file and then click Open to upload the file.
The name of file you selected is displayed.
Directory Service DA Certificate
Information
Displays information about the CA certificate that is in effect.
From this screen you can:
● View directory settings
● Edit directory settings
Editing directory settings
NOTE: Directory settings are only applicable to OpenManage Power Center installations in a Linux environment.
1. In the left pane, click Settings > Directory.
2. To enable LDAP authentication, select the Enable LDAP User Authentication check box, then provide the following
information:
● LDAP Server Address (required) — Enter single DNS names or IP addresses, or multiple names or addresses. Use
comma to separate multiple names or addresses. For example:
192.25.46.89,192.25.47.68
● Bind Distinguished Name (optional) — If a Bind Distinguished Name is not provided, Power Center uses an anonymous
bind to search for the login Distinguished Name of the user. For example:
uid=mark,ou=manager,dc=dell,dc=com
● Bind Password (optional unless a Bind Distinguished Name is provided). — Password of the Bind Distinguished
Name.
● Base Distinguished Name to Search (required) — The Distinguished Name of the branch of the directory from which
the search starts. For example:
ou=ccr,dc=dell,dc=com
● Attribute of User Login (optional) — Specify an attribute to search. If this field is not configured, the default search
string used is “uid”. The User Login attribute must be unique.
3. To configure advanced LDAP settings, select the Advanced Settings check box, then provide the following information:
● LDAP Server Port (required) — Enter the port number for the LDAP server over SSL. The default port number is 636.
● Search Filter (optional) — Specify a valid LDAP search filter if you cannot uniquely identify the login user within the
chosen Base Distinguished Name. If a search filter is not provided, the default filter is used (objectClass=*) and searches
all objects in the tree. The maximum length of this property is 1024 characters.
● Network Timeout (seconds) — Specify the time, in seconds, for which OpenManage Power Center LDAP must wait
for connecting to the LDAP server. The default timeout is 30 seconds.
● Search Timeout (seconds) — Specify the time, in seconds, after which the OpenManage Power Center LDAP stops
waiting for a response to the search request. The default timeout is 120 seconds.
● Enable Certificate Validation — If this option is selected, Power Center uses the CA certificate to validate the LDAP
server certificate during the SSL handshake.
106
Configuring settings