Specifications

98  Advanced Operations

Installation and Operations Manual

Enabling and Setting up LDAP Support

There are a few configuration requirements for properly enabling and setting up LDAP support. Below

is an overview of the minimum requirements.

Directory Services server configuration requirements:

1. Define at least one LDAP group.

2. Assign users to that LDAP group.

PT22 configuration requirements:

1. Enable LDAP support.

2. Define the IP address and domain component of at least one Directory Services server.

3. Set the LDAP bind request method being utilized by the Directory Services server.

4. Define the IP address of at least one DNS server.

5. Test DNS server configuration using Ping support.

6. Define at least one LDAP group and assign access rights for that group.

NOTE: LDAP group names on the Directory Service server and the PT22 must match.

Enabling and disabling LDAP support:

The Set LDAP command is used to enable or disable LDAP support.

To enable or disable LDAP support:

At the Switched CDU: prompt, type set ldap, followed by enabled or disabled and press Enter.

Setting the LDAP host address:

The Set LDAP Host command sets the TCP/IP address of the Directory Services server.

To set the LDAP host address:

At the Switched CDU: prompt, type set ldap, followed by host1 or host2 and the Directory Services

server’s IP address or hostname. Press Enter.

Examples

The following command sets the primary Directory Services server IP address to 98.76.54.32:

Switched CDU: set ldap host1 98.76.54.32<Enter>

The following command sets the secondary Directory Services server hostname to ldap.servertech.com:

Switched CDU: set ldap host2 ldap.servertech.com<Enter>

Changing the LDAP server port:

The Set LDAP Port command sets the port to which the Pt22 sends LDAP requests to on the previously

defined LDAP server. The default port is 389.

To change the LDAP server port:

At the Switched CDU: prompt, type set ldap port, followed by the port number and press Enter.

Example

The following command sets the LDAP server port number to 8888:

Switched CDU: set ldap port 8888<Enter>

Enabling and disabling LDAP over TLS/SSL support:

The Set LDAP UseTLS command is used to enable or disable LDAP over TLS/SSL support.

To enable or disable LDAP over TLS/SSL support:

At the Switched CDU: prompt, type set ldap usetls, followed by yes or no and press Enter.

NOTE: If LDAP Over TLS/SSL is enabled, MD5 binding is disabled.