5.5
Table Of Contents
- vCloud Director Administrator's Guide
- Contents
- vCloud Director Administrator's Guide
- Updated Information
- Getting Started with vCloud Director
- Adding Resources to vCloud Director
- Creating and Provisioning Organizations
- Understanding Leases
- Understanding Allocation Models
- Create an Organization
- Open the New Organization Wizard
- Name the Organization
- Specify the Organization LDAP Options
- Add Local Users to the Organization
- Set the Organization Catalog Sharing, Publishing, and Subscription Policies
- Configure Email Preferences
- Configure Organization Lease, Quota, and Limit Settings
- Confirm Settings and Create the Organization
- Allocate Resources to an Organization
- Open the Allocate Resources Wizard
- Select a Provider Virtual Datacenter
- Select an Allocation Model
- Configure the Allocation Model
- Allocate Storage
- Select Network Pool and Services
- Configure an Edge Gateway
- Configure External Networks
- Configure IP Settings on a New Edge Gateway
- Suballocate IP Pools on a New Edge Gateway
- Configure Rate Limits on a New Edge Gateway
- Create an Organization Virtual Datacenter Network
- Name the Organization Virtual Datacenter
- Confirm Settings and Create the Organization Virtual Datacenter
- Working With Catalogs
- Managing Cloud Resources
- Managing Provider Virtual Datacenters
- Enable or Disable a Provider Virtual Datacenter
- Delete a Provider Virtual Datacenter
- Modify a Provider Virtual Datacenter Name and Description
- Merge Provider Virtual Datacenters
- Enable or Disable a Provider Virtual Datacenter Host
- Prepare or Unprepare a Provider Virtual Datacenter Host
- Upgrade an ESX/ESXi Host Agent for a Provider Virtual Datacenter Host
- Repair a Provider Virtual Datacenter ESX/ESXi Host
- Enable vSphere VXLAN on an Upgraded Provider Virtual Datacenter
- Provider Virtual Datacenter Datastores
- Add a Storage Policy to a Provider Virtual Datacenter
- Edit the Metadata for a Storage Policy on a Provider Virtual Datacenter
- Add a Resource Pool to a Provider Virtual Datacenter
- Enable or Disable a Provider Virtual Datacenter Resource Pool
- Detach a Resource Pool From a Provider Virtual Datacenter
- Migrate Virtual Machines Between Resource Pools on a Provider Virtual Datacenter
- Configure Low Disk Space Thresholds for a Provider Virtual Datacenter Datastore
- Send an Email Notification to Provider Virtual Datacenter Users
- Managing Organization Virtual Datacenters
- Create an Organization Virtual Datacenter
- Open the New Organization Virtual Datacenter Wizard
- Select an Organization for the Organization Virtual Datacenter
- Select a Provider Virtual Datacenter
- Select an Allocation Model
- Configure the Allocation Model
- Allocate Storage
- Select Network Pool and Services
- Configure an Edge Gateway
- Configure External Networks
- Configure IP Settings on a New Edge Gateway
- Suballocate IP Pools on a New Edge Gateway
- Configure Rate Limits on a New Edge Gateway
- Create an Organization Virtual Datacenter Network
- Name the Organization Virtual Datacenter
- Confirm Settings and Create the Organization Virtual Datacenter
- Enable or Disable an Organization Virtual Datacenter
- Delete an Organization Virtual Datacenter
- Organization Virtual Datacenter Properties
- Add a Storage Policy to an Organization Virtual Datacenter
- Create an Organization Virtual Datacenter
- Managing External Networks
- Managing Edge Gateways
- Add an Edge Gateway
- Open the New Edge Gateway Wizard
- Select Gateway and IP Configuration Options for a New Edge Gateway
- Select External Networks for a New Edge Gateway
- Configure IP Settings on a New Edge Gateway
- Suballocate IP Pools on a New Edge Gateway
- Configure Rate Limits on a New Edge Gateway
- Configure the Name and Description of a New Edge Gateway
- Review the Configuration of a New Edge Gateway
- Configuring Edge Gateway Services
- Configure DHCP for an Edge Gateway
- Add a Source NAT rule to an Edge Gateway
- Add a Destination NAT rule to an Edge Gateway
- Configure the Firewall for an Edge Gateway
- Add a Firewall Rule for an Edge Gateway
- Reorder Firewall Rules for an Edge Gateway
- Enable VPN for an Edge Gateway
- Configure Public IPs for External Networks
- Creating VPN Tunnels on an Edge Gateway
- Create a VPN Tunnel In an Organization for an Organization Virtual Datacenter Network Backed by an Edge Gateway
- Create a VPN Tunnel Between Organizations
- Create a VPN Tunnel From an Organization Virtual Datacenter Network Backed by an Edge Gateway to a Remote Network
- Display Peer Settings for a VPN Tunnel to a Remote Network
- Edit VPN Settings
- Enable Static Routing on an Edge Gateway
- Managing Load Balancer Service on an Edge Gateway
- Editing Edge Gateway Properties
- Upgrade an Edge Gateway
- Delete an Edge Gateway
- View IP Use for an Edge Gateway
- Apply Syslog Server Settings to an Edge Gateway
- Add an Edge Gateway
- Managing Organization Virtual Datacenter Networks
- Adding Networks to an Organization Virtual Datacenter
- Configuring Organization Virtual Datacenter Network Services
- Configure DHCP for an Organization Virtual Datacenter Network
- Enable the Firewall for an Organization Virtual Datacenter Network
- Add a Firewall Rule for an Organization Virtual Datacenter Network
- Reorder Firewall Rules for an Organization Virtual Datacenter Network
- Enable VPN for an Organization Virtual Datacenter Network
- Create a VPN Tunnel Within an Organization
- Create a VPN Tunnel to a Remote Network
- Enable Static Routing for an Organization Virtual Datacenter Network
- Add Static Routes Between vApp Networks Routed to the Same Organization Virtual Datacenter Network
- Add Static Routes Between vApp Networks Routed to Different Organization Virtual Datacenter Networks
- Reset an Organization Virtual Datacenter Network
- View vApps and vApp Templates That Use an Organization Virtual Datacenter Network
- Delete an Organization Virtual Datacenter Network
- View IP Use for an Organization Virtual Datacenter Network
- Editing Organization Virtual Datacenter Network Properties
- Managing Network Pools
- Managing Cloud Cells
- Managing Service Offerings
- Register an Extension
- View or Modify Extension Properties
- Associate a Service Offering With an Organization Virtual Datacenter
- Disassociate a Service Offering From an Organization Virtual Datacenter
- Unregister an Extension
- Create a Service Instance
- Modify Service Instance Properties
- Add a Service Instance to a Virtual Machine
- Delete a Service Instance
- Managing Provider Virtual Datacenters
- Managing vSphere Resources
- Managing Organizations
- Managing System Administrators and Roles
- Add a System Administrator
- Import a System Administrator
- Enable or Disable a System Administrator
- Delete a System Administrator
- Edit System Administrator Profile and Contact Information
- Send an Email Notification to Users
- Delete a System Administrator Who Lost Access to the System
- Import a Group
- Delete an LDAP Group
- View Group Properties
- Roles and Rights
- Managing System Settings
- Modify General System Settings
- General System Settings
- Editing System Email Settings
- Configuring Blocking Tasks and Notifications
- Configuring the System LDAP Settings
- Customize the vCloud Director Client UI
- Configuring Public Addresses
- Configure the Account Lockout Policy
- Configure vCloud Director to use vCenter Single Sign On
- Monitoring vCloud Director
- Viewing Tasks and Events
- Monitor and Manage Blocking Tasks
- View Usage Information for a Provider Virtual Datacenter
- View Usage Information for an Organization Virtual Datacenter
- Using vCloud Director's JMX Service
- Viewing the vCloud Director Logs
- vCloud Director and Cost Reporting
- Monitoring Quarantined Files
- Roles and Rights
- Index
Table 9‑2. Supported Combinations of Operating System, LDAP Server, and Authentication Method
(Continued)
Operating System LDAP Server Authentication Method
Windows 7 (2008 R2) Active Directory Simple SSL
Windows 7 (2008 R2) Active Directory Kerberos
Windows 7 (2008 R2) Active Directory Kerberos SSL
Linux OpenLDAP Simple
Linux OpenLDAP Simple SSL
Configure an LDAP Connection
You can configure an LDAP connection to provide vCloud Director and its organizations with access to
users and groups on the LDAP server.
Prerequisites
In order to use Kerberos as your authentication method, you must add a realm. See “Add a Kerberos
Realm,” on page 135.
Procedure
1 Click the Administration tab and click LDAP in the left pane.
2 Type the host name or IP address of the LDAP server.
For Kerberos authentication, use the fully qualified domain name (FQDN).
3 Type a port number.
For LDAP, the default port number is 389. For LDAP over SSL (LDAPS), the default port number is 636.
4 Type the base distinguished name (DN).
The base DN is the location in the LDAP directory where vCloud Director connects. VMware
recommends connecting at the root. Type the domain components only, for example,
DC=example, DC=com.
To connect to a node in the tree, type the distinguished name for that node, for example,
OU=ServiceDirector, DC=example, DC=com. Connecting to a node limits the scope of the directory
available to vCloud Director.
5 Select the SSL check box to use LDAPS and choose one of the certificate options.
Option Action
Accept all certificates
Select the check box.
SSL Certificate
Click Browse to locate the SSL certificate.
SSL Keystore
Click Browse to locate the SSL keystore. Type and confirm the keystore
password.
6 Select an authentication method.
Option Description
Simple
Simple authentication consists of sending the LDAP server the user's DN
and password. If you are using LDAP, the LDAP password is sent over the
network in clear text.
Kerberos
Kerberos issues authentication tickets to prove a user's identity. If you
select Kerberos, you must select a realm.
vCloud Director Administrator's Guide
134 VMware, Inc.