Users Guide

Use the DNS domain controller lookup type, if you do not know the details of the domain controllers from which you want
to import the group or groups. To use the DNS domain controller, ensure that you have done the following tasks on the
Network Settings page:
● Selected the Register with DNS check box.
● Provided the Primary and Alternate DNS server addresses.
After you enter the domain name, OME-Modular searches the SRV records on the DNS servers to fetch the details of the
domain controllers in that domain.
If you know the IP address or FQDN of the domain controllers, you can use the Manual domain controller lookup type.
5. Enter the Bind DN and Bind Password.
NOTE: Anonymous bind is not supported for AD LDS.
6. Under Advanced Options, enter the Server Port, Base Distinguished Name to Search, Attribute of User Login,
Attribute of Group Membership, and Search Filter.
By default, LDAP port number of 636 is populated. To change, enter a port number.
Enter the User attributes that are configured in the LDAP system, already. It is recommended that the attributes are unique
within the selected BaseDN. Else, configure a search filter to ensure that the attributes are unique. If the combination of
attribute and search filter cannot identify the user DN uniquely, the login task fails.
The Attribute of Group Membership stores information about groups and members in the directory.
NOTE: Configure the user attributes in the LDAP system that is used to query before integrating on the directory
services.
NOTE: Enter the user attributes as cn or sAMAccountName for AD LDS configuration, and UID for LDAP
configuration.
7. Select the Network Timeout and Search Timeout durations.
The maximum timeout duration supported is 300 seconds.
8. Select the Certificate Validation checkbox if you want to validate the directory service certificate and select the
certificate for validation.
The certificate must be a Root CA Certificate encoded in Base64 format.
The Test Connection option is enabled.
9. Click Test Connection to check the LDAP connection.
10. Enter the bind user credentials of the domain you want to connect to.
NOTE:
While testing the connection, ensure that the Test username is the Attribute of User Login value entered
earlier.
11. Click Test Connection.
The Directory Service Information window, indicating a successful connection, is displayed.
12. Click Ok and Finish.
A job is created and run to add the requested directory on the Directory Services page.
Logging in to OME–Modular using the directory user credentials
To log in to OME–Modular using the directory user credentials:
From the OME–Modular login page, log in using the AD user credentials. Enter the domain name, if necessary.
Importing active directory and LDAP user groups
You can import Active Directory (AD) and LDAP groups and map them to the existing OME–Modular groups.
NOTE: Users without Administrator rights cannot enable or disable the Active Directory (AD) and LDAP users.
To import the groups:
1. On the Users list page, click Import Directory Group.
28
Logging in to OME-Modular