5.1

Table 9-2. Supported Combinations of Operating System, LDAP Server, and Authentication Method
(Continued)
Operating System LDAP Server Authentication Method
Windows 7 (2008 R2) Active Directory Kerberos SSL
Linux OpenLDAP Simple
Linux OpenLDAP Simple SSL
Configure an LDAP Connection
You can configure an LDAP connection to provide vCloud Director and its organizations with access to users
and groups on the LDAP server.
Prerequisites
In order to use Kerberos as your authentication method, you must add a realm. See “Add a Kerberos
Realm,” on page 125.
Procedure
1 Click the Administration tab and click LDAP in the left pane.
2 Type the host name or IP address of the LDAP server.
For Kerberos authentication, use the fully qualified domain name (FQDN).
3 Type a port number.
For LDAP, the default port number is 389. For LDAP over SSL (LDAPS), the default port number is 636.
4 Type the base distinguished name (DN).
The base DN is the location in the LDAP directory where vCloud Director connects. VMware recommends
connecting at the root. Type the domain components only, for example, DC=example, DC=com.
To connect to a node in the tree, type the distinguished name for that node, for example,
OU=ServiceDirector, DC=example, DC=com. Connecting to a node limits the scope of the directory available
to vCloud Director.
5 Select the SSL check box to use LDAPS and choose one of the certificate options.
Option Action
Accept all certificates
Select the check box.
SSL Certificate
Click Browse to locate the SSL certificate.
SSL Keystore
Click Browse to locate the SSL keystore. Type and confirm the keystore
password.
6 Select an authentication method.
Option Description
Simple
Simple authentication consists of sending the LDAP server the user's DN and
password. If you are using LDAP, the LDAP password is sent over the
network in clear text.
Kerberos
Kerberos issues authentication tickets to prove a user's identity. If you select
Kerberos, you must select a realm.
vCloud Director Administrator's Guide
124 VMware, Inc.