HP Storage Essentials SRM 6.0 User Guide for Enterprise Edition and Standard Edition SRM Software (July 2008)

HP Storage Essentials SRM 6.0 User Guide 157

5. Enter the current password in the Old Password box.

6. Enter the new password in the New Password box.

7. Re-enter the password in the Confirm Password box.

8. Click Change.

The Database Admin Utility changes the password for the specified account.

Using Active Directory/LDAP for Authentication

NOTE: Active Directory/LDAP is not supported with Storage Essentials Standard Edition.

The management server supports external authentication through Active Directory (AD) and

Lightweight Directory Access Protocol (LDAP) directory services. When you configure the

management server to use external authentication, user credentials are no longer stored in the

management server database. This configuration centralizes all security related requirements to the

enterprise AD/LDAP infrastructure, such as password expiration, resets, and complexity

requirements.

When a user attempts to log into the management server, the management server authenticates the

user name and password against AD/LDAP for credential verification. If AD/LDAP verifies that this

user has the correct credentials, the management server allows this user access to the application.

Keep in mind the following:

• The login-handler.xml file contains configuration information for both AD and LDAP. It is

important to enable either AD or LDAP; you cannot enable both.

• If you want to go back and forth between internal and external (AD/LDAP) authentication,

rename the login-handler.xml file before you modify it. This way you can easily switch

back to internal authentication by changing the file name back to login-handler.xml.

To use AD/LDAP to authenticate your users, complete the following procedures:

• ”Step 1 — Configure the Management Server to Use AD or LDAP” on page 157

• ”Step 2 — Restart the AppStorManager Service and Login as the Designated Admin Account”

on page 164

• ”Step 3 — Add Users to the Management Server” on page 165

• ”Step 4 — Provide Login Information to Your Users” on page 165

Step 1 — Configure the Management Server to Use AD or LDAP

If you want to use AD/LDAP, you must modify the login-handler.xml file. How you modify the

To configure the management server:

• To use AD, see ”Configuring the Management Server to Use Active Directory” on page 158

• To use LDAP, see ”Configuring the Management Server to Use LDAP” on page 161