Veritas Storage Foundation 5.1 SP1 Cluster File System Installation Guide (5900-1510, April 2011)

3
Add the LDAP user to the main.cf file.
# haconf makerw
# hauser -add "CN=vcsadmin1/CN=people/\
DC=symantecdomain/DC=myenterprise/\
DC=[e-mail]" -priv Administrator
# haconf -dump -makero
If you want to enable group-level authentication, you must run the following
command:
# hauser -addpriv \
ldap_group@ldap_domain AdministratorGroup
4
Verify that the main.cf file has the following lines:
# cat /etc/VRTSvcs/conf/config/main.cf
...
...
cluster clus1 (
SecureClus = 1
Administrators = {
"CN=vcsadmin1/CN=people/DC=symantecdomain/DC=myenterprise/
DC=[e-mail]" }
AdministratorGroups = {
"CN=symantecusergroups/DC=symantecdomain/DC=myenterprise/
DC=[e-mail] " }
)
...
...
5
Set the VCS_DOMAIN and VCS_DOMAINTYPE environment variables as
follows:
■ VCS_DOMAIN=myenterprise.symantecdomain.com
■ VCS_DOMAINTYPE=ldap
For example, for the Bourne Shell (sh or ksh), run the following commands:
# export VCS_DOMAIN=myenterprise.symantecdomain.com
# export VCS_DOMAINTYPE=ldap
Verifying the Storage Foundation Cluster File System installation
About enabling LDAP authentication for clusters that run in secure mode
254