Administrator Guide

Table Of Contents
LDAP
The Lightweight Directory Access Protocol (LDAP) is an application protocol for accessing and maintaining distributed directory
information services over an Internet Protocol (IP) network. Directory services provides any organized set of records with a
hierarchical structure. LDAP is a client-server model protocol.
Directory structure
The organization of a directory is a tree structure. The top most entry in a directory is known as the root entry. This entry
normally represents the organization that owns the directory.
Figure 4. LDAP Directory structure
The metro node SolVe Desktop provides information on configuring LDAP.
Examples (ldapsearch command)
Use the ldapsearch command to verify the directory servers attribute mapping values.
To determine the users that reside under a given organizational unit:
service@ManagementServer:~> /usr/bin/ldapsearch -x -LLL -l 30
-H ldap://10.31.50.59:389 -b 'ou=dev,ou=vplex,dc=emc,dc=com' -D
'cn=Administrator,dc=emc,dc=com' objectClass=posixAccount -w password -E pr=1000/
noprompt dn
dn: uid=dev1,ou=security,ou=dev,ou=vplex,dc=emc,dc=com
dn: uid=dev2,ou=security,ou=dev,ou=vplex,dc=emc,dc=com
dn: uid=dev3,ou=GUI,ou=dev,ou=vplex,dc=emc,dc=com
To determine the users that reside under a group principal that must be mapped in the case of Open LDAP servers:
service@ManagementServer:~> /usr/bin/ldapsearch -x -LLL -l 30 -
H ldap://10.31.50.59:389 -b 'cn=GUI-Group,ou=vplex,dc=emc,dc=com' -D
'cn=Administrator,dc=emc,dc=com' -w password -E pr=1000/noprompt
dn: cn=GUI-Group,ou=vplex,dc=emc,dc=com
objectClass: groupOfNames
cn: GUI-Group
description: GUI-Group
member: uid=QE1,ou=gui,ou=qe,ou=vplex,dc=emc,dc=com
Configure the WAN Network
57