HP XP P9000 Performance Advisor Software v5.5 Install Guide (T1789-96339, February 2013)

IMPORTANT:
• Note the LDAP Distinguished Names (DN)s for the StorageAdmins and StorageUsers
groups. An LDAP group used with HP XP P9000 Performance Advisor must have the DNs of
the group members available in an attribute of the group.
• Note the UserBaseDN and GroupBaseDN required for HP XP P9000 Performance Advisor
to allow authentication and authorization of users.
◦ UserBaseDN is the location in the LDAP tree that contains all the user entries. HP XP
P9000 Performance Advisor uses UserBaseDN to search user entries in the LDAP directory
when authenticating users.
◦ GroupBaseDN is the location in the LDAP tree that contains all the group entries. HP XP
P9000 Performance Advisor uses GroupBaseDN to search group entries in the LDAP
directory when authorizing users.
RADIUS Authentication
RADIUS Authentication is required if you want to implement RADIUS protocol for centralized
authentication, where the RADIUS server authenticates and authorizes HP XP P9000 Performance
Advisor users. The following RADIUS server implementation and authentication mechanisms are
supported by HP XP P9000 Performance Advisor from v4.5 onwards:
Microsoft Active Directory with Internet Authentication
Service (IAS) for Windows platform
RADIUS server implementation
RADIUS authentication mechanisms
• PAP: Password Authentication Protocol
• CHAP: Challenge Handshake Authentication Protocol
To implement RADIUS Authentication, your system administrator must add a RADIUS Vendor-Specific
Attribute (VSA) to the user profile on the RADIUS server. The VSA is required for authorizing HP
XP P9000 Performance Advisor and it must have an attribute type of 1, and a vendor ID of 11
that is assigned to Hewlett-Packard by IANA. Further, the VSA can have one or both of the following
attribute values, depending on the role assigned to the user profile. In the following examples, a
VSA attribute type and value is assigned to an HP XP P9000 Performance Advisor administrator
and user:
32 Understanding the HP XP P9000 Performance Advisor installation prerequisites