4.0

Table Of Contents
VMware, Inc. 139
Chapter 15 Managing Lab Manager Settings
Set Up an LDAP Connection
YoucansetupanLDAPconnectiontoprovideLab Manageraccesstousersandgroupsthatalreadyexiston
theLDAPserver.
To set up an LDAP connection
1Intheleftpane,clickSettings.
2ClicktheLDAPtab.
3TypethehostnameorIPaddressoftheLDAPserver.
Ifyoudonotspecifyaserver,Lab Manageruses
serverlessbinding(forActiveDirectoryonly),which
connectstoanyavailabledomaincontroller.Serverlessbindingprovidesredundancyandloadbalancing
benefitsandrequiresthattheLab ManagerserverisinthesamedomainastheActiveDirectorydomain
controller.
4Typeaportnumberorleaveblanktousethedefaultports.
If
theLDAPserverislisteningonanondefaultport,typetheportnumber.ForLDAP,thedefaultportis
389;forLDAPS,thedefaultportis636.
5Typethebasedistinguishedname(DN).
ThebaseDNisthelocationintheLDAPdirectorywhereLab Managerconnects.
Lab ManagercandetectthebaseDN
ifyourLDAPserversupportsthis.Leavethistextboxblankand
clickTestLDAPSettingstodetermineifyourserversupportsbaseDNdetection.
VMwarerecommendsconnectingattheroot.Youneedtotypethedomaincomponentsonly,forexample,
DC=vmware,DC=com.
Toconnecttoanodeinthetree,type
thedistinguishednameforthatnode,forexample,
OU=LabManager,DC=vmware,DC=com.Connectingatanodelimitsthescopeofthedirectoryavailableto
Lab Manager.
6 SelecttheUseLDAPScheckboxifyouhaveanLDAPserversetuptosupportLDAPS.
LDAPSmakesLDAPtrafficconfidentialandsecurebyusingLDAPover
SecureSocketsLayer(SSL).
CAUTIONIfyouspecifyanOU,onlyLDAPusersinthatOUcanlogintoLab Manager.Insomecases,
thisrestrictioncanblockaccesstousersthatyoudonotwanttoblock.
Forexample,considerthefollowingscenario:
DomainName:mydomain.com
TopLevelOUs:DublinOfficeandHeadOffice
Groups:LabMangroupthatincludesusersfromboththeDublinOfficeandHeadOfficeOUs.
IfyourbindingstringisOU=HeadOffice,DC=mydomain,DC=com,andyouaddtheLabMangrouptoa
Lab Managerorganization,onlymembersoftheLabMangroupwhoarealsomembersoftheHeadOffice
OUcanlogintoLab Managerandaccessthe
organization.MembersoftheLabMangroupfromthe
DublinOfficeOUareexcluded.