Lightweight Directory Access Protocol in Dell Power Vault ML 6000 tape library

The DellPower Vault ML 6000 Tape library supports the Lightweight Directory Access Protocol (LDAP). LDAP is the industry standard Internet protocol that provides centralized user account management. User account information is centralized and shared by different applications, simplifying user account management tasks. Enabling LDAP allows existing user accounts residing on an LDAP server to be integrated into the library's current user account management subsystem.

Administrative users can enable and configure LDAP. Once LDAP is enabled, users can log into the library using either LDAP or local authentication. To use local authentication, you must enter only a local username and password.  To use LDAP authentication, you must enter a directory service user name and password and specify an LDAP domain.

Administrative users can add, delete, and modify only local user account information, including a user’s partition access settings. The library Web client and operator panel do not allow creating, modifying, or deleting user account information on an LDAP server. This must be done by the directory service provider.

The Dell PowerVault ML6000 Tape Library is a truly modular back-up solution for your critical files and data. Navigator continues to deliver the same great services and support. Find Navigator Support channels like email, and telephone numbers for your Tape Library.

What are the LDAP server guidelines?

• When setting up a user account in Microsoft Active Directory, make sure to populate the UNIX attributes with information. This requires all Active Directory users to be part of an NIS Domain, or have NIS Domain information entered. After entering NIS Domain information for a user, you will need to reset the user’s password.

•The Login screen displays LDAP login options only when LDAP is enabled.

• The library supports the Microsoft® Active Directory® LDAP server. Windows® Services for Unix® 2.5 is required for this support.

• For LDAP users with library user privileges, access to library partitions is determined by group assignment on the LDAP server. Groups must be created on the LDAP server with names that correspond to the library partition names. Users with user privileges must be assigned to these groups on the LDAP server to have access to the corresponding partitions on the library. LDAP users with administrative privileges have access to all partitions and administrative functions and do not need to be assigned to partition-related groups on the LDAP server.

• The library supports user account information in the schema defined by RFC 2307. User password schemes must be encrypted using UNIX crypt. In addition, usernames (did) and passwords (userPassword) must be created using lowercase characters to be compatible with the library.

How to configure LDAP on the Dell PowerVault ML 6000 library ?

• Before configuring LDAP on the library, obtain the following LDAP parameters from the network

Administrator and enter these parameters on the Setup - LDAP screen on the Web client:

– User provider — the LDAP server URL, where user account information is stored.

– Group provider — the LDAP server URL, where group information is stored. If the group information is stored in the same location as the user account information, use the user provider URL.– Default domain — the domain that is populated on the login screen by default.

– Principle authentication — the login used to gain access to the directory service.

– Credential authentication — the password for the principal authentication login.

– Library user group — the name of the group the user want to associate with the library. This group is equivalent to the local user privilege level. Any member of this group can manage this library

– Admin group — the name of the group associated with the library administrator, equivalent to the local administrative user privilege level. Any member of this group has administrative privileges

.• Selecting Test LDAP on the Web client Setup - LDAP screen tests current LDAP settings. While the test is in progress, the Progress Window appears. If the test is successful, Success  appears in the Progress Window. If the test is unsuccessful, Failure  appears in the  Progress Window. Follow the instructions listed in the Progress Window to resolve any issues that occur during the operation.

• After configuring or modifying LDAP settings, save the library configuration.

   To access the  online Help system to configure LADP, click the Help icon at the top right of the Web client or operator panel user interface.Then view and enable LDAP settings from either the Web client or the operator panel. However, the user  can only configure LDAP settings using the Web client.

The paths to open the appropriate screens are:

• From the Web client, select Setup > User Management > LDAP.

• From the operator panel, select Setup > LDAP.

Logging In When LDAP is Enabled

When LDAP is enabled, the Login screen displays the following items in addition to the User Name and Password text boxes:

•Use Local Authentication - Users can select this option to log in using a local username and password.

•Use LDAP Authentication - Users can select this option to select or enter a domain and log in using a directory service username and password. 

Navigator System provides builds and maintains any IT infrastructure to fit your needs. Maintenance for your infrastructure gear may be the last thing you think about, but it’s a necessity when protecting and maintaining the value of such expensive IT gear. We are receiving extremely great pricing that you can’t get anywhere else!

Navigator System Private Ltd provides Tape Library maintenance support with spare parts-replaceable unit service in most cities with flexible maintenance Contract.

Navigator System offers support, maintenance, repair, service, and AMC in Bangalore, Chennai, Mumbai, Hyderabad, Delhi, Pune and all over India.

If you have questions, please  feel  free  to contact us at  +91 9845451006 or sales@navigatorsystem.com

Please visit our website for more details: http://www.navigatorsystem.com/