2.5

Table Of Contents
VMware Lab Manager User’s Guide
156 VMware, Inc.
To specify the user authentication method as a Lab Manager Administrator
without LDAP server access
1Intheleftpane,clickSettings.
2CleartheValidateLDAPUserswhenEditedcheckbox.
ThisactionactivatestheIsLDAPcheckboxdescribedinstep5.
3Intheleftpane,clickUsers.
4MovethepointerovertheusernameandchoosePropertiesfromthemenu.
5Specifytheauthenticationmethod.
SelectingtheIsLDAPcheckboxandclickingOKensuresanActiveDirectory
domain,ratherthantheLab M anageruserdatabase,authenticatesthisuser
whenheorshelogsintotheWebconsole.See“LDAPPreferences:LDAP
BindingandGroupStrings”onpage 156.
BecausetheLab Manageradministratorisnotauthenticatedagainst
the
ActiveDirectorydomain,theadministratorcannotmakeuseofthevalidation
processavailabletoLDAPusers.
DeselectingtheIsLDAPcheckboxandclickingOKensurestheLab Manager
userdatabase,ratherthananActiveDirectorydomain,authenticatesthisuser
whenheorshelogsintotheWebconsole.
LDAP Preferences: LDAP Binding and Group Strings
TheLDAPbindingstringreferencestheMicrosoftActiveDirectoryservicethat
Lab ManagerusestoauthenticateuserswhoareunknownormarkedasLDAPusers.
TheActiveDirectoryservicemustberunningtoallowLDAPuserstologinto
Lab Manager.YoucanmodifythescopeoftheusersusingActiveDirectory
organizationalunits(OUs)andspecificgroupinformation.
LDAP Binding String Usage
LDAP://<server>/<object name>
TheLDAPatthebeginningofthestringmustbeallcaps.Youarenotrequiredtoprovide
a <server>.Ifyoudonotspecifyaserver,Lab Managerusesserverlessbinding,which
connectstoanyavailabledomaincontroller.Serverlessbindingprovidesredundancy
andloadbalancingbenefits.Ifsecurityconsiderationspreventyou
fromusing
serverlessbinding,specifyafullyqualifieddomainnameforthedomain(forexample,
vmware.com)ordomaincontroller(forexample,dc1.vmware.com).