HP StorageWorks P9000 Performance Advisor Software v5.3 Install Guide (T1789-96323, August 2011)

LDAP Authentication
RADIUS Server Authentication
NOTE:
To implement the Windows System Authentication or Windows Domain based Authentication on
your management station, ensure that your management station is part of a domain.
To implement the Windows Domain, LDAP, or RADIUS authentication type, you must complete
the prerequisites that allow P9000 Performance Advisor to work with the selected authentication
server to authenticate and authorize users. For more information, see Windows Domain based
Authentication on page 27, LDAP Authentication on page 27, and RADIUS Authentica-
tion on page 28.
P9000 Performance Advisor Native Authentication
The P9000 Performance Advisor Native Authentication is the simplest method to manage user accounts
and is required if you want P9000 Performance Advisor to maintain its own set of user credentials.
During installation, if the P9000 Performance Advisor installer detects that your management station
is not configured to be part of a Windows domain or able to communicate with an LDAP, or RADIUS
server, the P9000 Performance Advisor Native Authentication is implemented. There are no
prerequisites associated with the P9000 Performance Advisor Native Authentication type.
Windows System Authentication
The Windows System Authentication is required in the following case:
1. Your management station belongs to a Windows domain.
2. Your P9000 Performance Advisor users are a combination of local system users and group of
users who belong to the same, or different domains.
OR
Your P9000 Performance Advisor users are a combination of local system users or group of users
who belong to the same, or different domains.
There are no prerequisites associated with the Windows System Authentication.
Windows Domain based Authentication
The Windows Domain based Authentication is required, if you want to implement the domain-based
authentication for administrators and user domain groups residing on the same or different domains.
Only users from the domain groups are given privileges to log on to P9000 Performance Advisor. By
default, P9000 Performance Advisor refers to these groups as HP Storage Admins and HP Storage
Users.
To implement Windows Domain based Authentication, your domain or site administrator must create
the two default domain groups, or the domain groups of choice on the domain controller.
LDAP Authentication
The LDAP Authentication is required if you want to implement the Lightweight Directory Access Protocol
(LDAP) for centralized authentication, where the LDAP server authenticates and authorizes P9000
Performance Advisor users. The following LDAP server implementations and authentication mechanism
are supported by P9000 Performance Advisor from v4.5 onwards:
HP StorageWorks P9000 Performance Advisor Software Installation Guide 27