4.2.1

Table Of Contents
The imported certificate appears in the Imported SSL certificates list. You activated secure connection between
Orchestrator and your LDAP server.
What to do next
You must enable SSL on the LDAP tab in the Orchestrator configuration interface.
Specify the Browsing Credentials
Orchestrator must read your LDAP structure to inherit its properties. You can specify the credentials that
Orchestrator uses to connect to an LDAP server.
Prerequisites
Ensure that you have a working LDAP service in your infrastructure and have generated the LDAP connection
URL.
Procedure
1 Log in to the Orchestrator configuration interface as vmware.
2 Click LDAP.
3 Specify the primary and secondary LDAP hosts, the lookup port of the LDAP server, and the root element.
4 Type a valid user name (LDAP string) in the User name text box for a user who has browsing permissions
on your LDAP server.
The possible formats in which you can specify the user name in Active Directory are as follows:
n
Bare user name format, for example user.
n
Distinguished name format: cn=user,ou=employees,dc=company,dc=org.
Use this format with Sun and eDirectory. Do not use spaces between the comma and the next
identifier.
n
Principal name format: user@company.org.
n
NetBEUI format: COMPANY\user.
5 In the Password text box, type the password for the user name you entered in Step 4.
Orchestrator uses the credentials to connect to the LDAP server.
What to do next
Define the LDAP containers for Orchestrator to look up users and groups.
Define the LDAP User and Group Lookup Paths
You can define the users and groups lookup information.
Two global roles are identified in Orchestrator: Developers and Administrators. The users in the Developers
role have editing privileges on all elements. The users in the Administrators role have unrestricted privileges.
Administrators can manage permissions, or discharge administration duties on a selected set of elements to
any other group or user. These two groups must be contained in the Group lookup base.
Prerequisites
You must have a working LDAP service on your infrastructure.
Procedure
1 Log in to the Orchestrator configuration interface as vmware.
Chapter 5 Initial Configuration of the Orchestrator Server
VMware, Inc. 45