HP Device Manager 4.6 - LDAP Troubleshooting Guide

ManualsBrandsHP ManualsSoftwareHP Device Manager

Technical white paper

HP Device Manager 4.6

LDAP Troubleshooting Guide

Table of contents

Introduction .................................................................................................................................................................................... 2

HPDM LDAP-related context and background ................................................................................................................... 2

LDAP in HPDM ................................................................................................................................................................................ 2

Configuring User Authentication ............................................................................................................................................ 4

Importing a user or group from LDAP .................................................................................................................................. 6

Logging in as an LDAP user..................................................................................................................................................... 7

Troubleshooting steps ................................................................................................................................................................. 7

General configuration .............................................................................................................................................................. 7

Multiple child domain users login .......................................................................................................................................... 9

Testing environment: ........................................................................................................................................................... 9

LDPA child domain account testing .................................................................................................................................... 10

Testing environment: ......................................................................................................................................................... 10

Conclusion: ........................................................................................................................................................................... 13

For more information ................................................................................................................................................................. 14

Summary of content (14 pages)

PAGE 1
Technical white paper HP Device Manager 4.6 LDAP Troubleshooting Guide Table of contents Introduction .................................................................................................................................................................................... 2 HPDM LDAP-related context and background ................................................................................................................... 2 LDAP in HPDM .....................................................
PAGE 2
Introduction The purpose of this document is to demonstrate the principle of Lightweight Directory Access Protocol (LDAP) used in HP Device Manager (HPDM) and how to troubleshoot issues that might occur while attempting to use user authentication with Active Directory and other LDAP servers. HPDM LDAP-related context and background Users and groups in an Active Directory, or a different LDAP server, can be used to log in to HPDM.
PAGE 3
For HPDM inner users, HPDM authenticates by itself. When you use LDAP to log in to HPDM, the LDAP server authenticates you and returns the result to HPDM (see Logging in as an LDAP user). The following chart is the basic flow of logging in to HPDM as an LDAP user. Figure 2.
PAGE 4
Configuring User Authentication User Authentication must be configured for the LDAP users and groups before using LDAP to log in to HPDM. In the following example, the LDAP server is used to log in to HPDM with specifications as follows: • LDAP server type: Active Directory • LDAP server address: 192.168.58.134 • LDAP server port: 389 • LDAP server domain: magic.com • LDAP server administrator: cn=Administrator,cn=Users,dc=magic,dc=com • LDAP server password: 123456 1. 2.
PAGE 5
The second example uses the fully qualified domain names (FQDN). The following example shows how to enter the information when using General LDAP as the Server Type. 3. Click the Test button to verify the configuration..
PAGE 6
Importing a user or group from LDAP 1. Click Tools > User Management > Import from LDAP. 2. The Import Users and Groups dialog will open and display the LDAP server information as a tree. Select groups and users from the LDAP tree to import them to HPDM. HPDM will store the user names and group names in the HPDM database. View the users that belong to an imported group by double-clicking the group name.
PAGE 7
Logging in as an LDAP user 1. Log in to HPDM using the creditials of an imported LDAP user. Troubleshooting steps General configuration • Make sure that the network between the HPDM Server and the LDAP server is working and that the HPDM Server can access the LDAP server. – Verify using the ping command. The following example uses 192.168.58.134 as the LDAP server address.
PAGE 8
• Make sure that the LDAP server firewall does not block the port. – Verify using the telnet command. The following example uses the default port, 389. • Make sure that the LDAP User Authentication is configured correctly from the HPDM Console before importing users and groups. See Configuring User Authentication.
PAGE 9
• If an HPDM inner user and an imported LDAP user share credentials, HPDM will default to the inner user. • If a user or group is modified on the LDAP server, their information will not be updated in the HPDM Console until their next login. – For example, if the imported LDAP user Administrator changes their password on the LDAP Server side, they must log in to the HPDM Console again for the new password to take effect.
PAGE 10
2. 3. Import the child domain user into HPDM. The tree path is restricted. In the testing environment, it is dc=hpdm, dc=dto. When you import the user from the LDAP server, the Base DN is already filled in. You can see users within the DN only. A. Change the Base DN to see users from other trusted domains, including the child domain. In the testing environment, the Base DN needs to be dc=subhpdm, dc=hpdm, dc=dto. B. Then, search for the user you want and import the user into HPDM.
PAGE 11
PAGE 12
• Test case 1 – Parent host: 10.10.10.2 – Child domain: sh.3ls.com – Child domain account: jasonss Test result: Success • Test case 2 – Child host: 10.10.10.241 – Child domain: sh.3ls.
PAGE 13
• Test case 3 – Child host 10.10.10.241 – Parent domain 3ls.com – Parent domain account jasons Testing result: Fail • Test case 4 – Parent host 10.10.10.2 – Parent domain 3ls.com – Parent domain account jasons Testing result: Success Conclusion: To use a child domain account to connect to the LDAP server, the account must belong to the child domain. Either the parent host or the child host can be used.
PAGE 14
For more information To read more about LDAP, go to http://en.wikipedia.org/wiki/LDAP. Sign up for updates hp.com/go/getupdated © Copyright 2014 Hewlett-Packard Development Company, L.P. Microsoft and Windows are U.S. registered trademarks of the Microsoft group of companies. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.