HP Systems Insight Manager 7.2 Technical Reference Guide

Directory Services
The Directory Groups tool is used to determine a system's membership in a Windows domain,
organizational unit (OU), or group. Before using the Directory Groups tool, you must first configure
the directory server parameters on the Directory Server Configuration page. After you configure
the directory server, the Directory Groups tool must be configured with the distinguished name
(DN) of the desired container objects in the directory.
Table 31 Directory Services
AccessDescriptionName
Select Options→Directory
Services→Directory Server
Configuration.
Used to configure directory server
settings, including the network name,
port, and credentials to access the
directory server.
Directory Server Configuration
See Configuring directory servers.
select Options→Directory
Services→Directory Groups.
Used to enter the complete
distinguished name (DN) of one or
Directory Groups
See Configuring directory groups.
more containers, organizational units
(OU), or group objects in the
directory.
Related information
Configuring directory servers
Procedure 76 Configuring the Directory Service
1. Required: Enter the network name or IP address of the directory server in the Server Name
field. Multiple systems can be specified by separating each system with a semicolon (;). This
action enables a backup to be specified if a system cannot be contacted. For example, if the
first system cannot be contacted, the second system in the list is tried.
2. Select either Use SSL or Use Global Catalog for the Port Configuration setting.
The port configuration flag is preset to use SSL and to specify the default Lightweight Directory
Access Protocol (LDAP) SSL port of 636 in the Port field. The global catalog flag is cleared
by default. Selecting and clearing the SSL or global catalog flags changes the port number
to the default values.
The global catalog communicates through LDAP, but it does so over a different set of ports:
3368 and 3269 for SSL. The global catalog contains a read-only copy of all objects in the
Active Directory, spanning multiple domains, but only a small subset of object attributes.
Configuring a global catalog here can provide a simple solution for multidomain sites. You
can configure the directory attributes replicated to the global catalog, but the desired attributes
are enabled by default.
NOTE: HP recommends selecting Use SSL so that user name and password credentials are
encrypted. If this option is cleared, the directory server certificate is treated as a trusted system
certificate and can be imported using the existing HP SIM GUI or command line interface
(CLI).
3. Required: Enter the port number of the directory server.
The port number is preset to use SSL in the Port Configuration field and to specify the default
LDAP SSL port of 636 in the Port field.
4. In the User Name field, enter the user name to authenticate to the directory server. Write
access for this account is not required. An empty field indicates that an anonymous connection
should be used. Any password entered is ignored.
5. In the Password field, enter the password for the user name specified.
6. In the Password Verify field, reenter the password for the user name specified.
7. Click Test connection to verify the connection is successful using current settings.
228 Operations