HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

Registering an LDAP search user account
Use the hcmdsldapuser command to register the an LDAP search user account on the management
server.
Operations to complete in advance
Register an LDAP search user on the LDAP directory server.
Information to collect in advance
• DN and password of the LDAP search user
• Server identification name of the LDAP directory server (for LDAP authentication)
Specify the server identification name that was specified for the auth.server.name property
in the exauth.properties file.
• Domain name of the RADIUS server (for RADIUS authentication)
Specify the domain name specified for auth.radius.auth.server.name-property-
value.domain.name in the exauth.properties file.
• Realm name of the Kerberos server (for Kerberos authentication)
If you directly specify information about a Kerberos server in the exauth.properties file,
specify the value specified for auth.kerberos.default_realm or auth.kerberos.au-
th.kerberos.realm_name-property-value.realm.
If you specify the settings in the exauth.properties file to use the DNS server to look up in-
formation about a Kerberos server, specify the realm name registered in the DNS server.
To register an LDAP search user account:
• Execute the hcmdsldapuser command.
In Windows:
installation-folder-for-Common-Component\bin\hcmdsldapuser /set /
dn DN-of-user-account-used-to-search-for-LDAP-user-info [/pass
password-of-user-account-used-to-search-for-LDAP-user-info] /name
name
In Linux:
installation-directory-for-Common-Component/bin/hcmdsldapuser -set
-dn DN-of-user-account-used-to-search-for-LDAP-user-info [-pass
password-of-user-account-used-to-search-for-LDAP-user-info] -name
name
• DN-of-user-account-used-to-search-for-LDAP-user-info
Specify a DN by following the rules defined in RFC4514. For example, if the following
characters are included in a DN, you need to use a backslash (\) to escape each character.
Spaces # + , ; < = > \
• password-of-user-account-used-to-search-for-LDAP-user-info
This is case-sensitive and must exactly match the password registered in the LDAP directory
server. If you execute the command without specifying the pass option, you will be prompted
to enter a password (in the interactive mode, the entered character string is displayed by using
replacement characters).
Administrator Guide 151