User`s guide

Chapter 4 Configuring Your Library

Using LDAP

Scalar i6000 User’s Guide 229

You can configure the Lightweight Directory Access Protocol (LDAP)

settings any time after the initial library configuration. Once you enable

and configure LDAP, you can view your current LDAP settings using the

LDAP menu.

Active Directory no longer requires Windows

Services for Unix 2.5.

Any LDAP configurations from i6.3.1 and

earlier will not import into the i6.5 LDAP

configuration. You must reconfigure LDAP

for the i6.5 update.

LDAP Server Guidelines4

LDAP is the industry standard Internet protocol that provides centralized

user account management subsystem. User account information is

centralized and shared by different applications, simplifying user account

management tasks. Administrative users can add, delete, and modify

only local user account information.

User and Group Access

For LDAP accounts with user privileges, access to library partitions is

determined by group assignment on the LDAP server. Groups must be

created on the LDAP server with names that correspond to the library

partition names. Users without administrator privileges must be assigned

to these groups on the LDAP server to have access to the corresponding

partitions on the library. LDAP accounts with administrative privileges

have access to all partitions and administrative functions and do not need

to be assigned to partition-related groups on the LDAP server.

Usernames and group objects must be in LDAP

Distinguished Names formats.

Note

CAUTION

Note