Administrator Guide

Enable or Disable TLS Encryption for the LDAP Connection
Enable TLS encryption for the connection from the FluidFS cluster to the LDAP server to avoid sending data in plain text. To validate the
certificate used by the LDAP server, you must export the LDAP SSL certificate and upload it to the FluidFS cluster.
Steps
1. In the Storage view, select a FluidFS cluster.
2. Click the File System tab.
3. In the File System view, select Client Accessibility.
4. Click the Directory Services tab.
5. Click Edit Settings in the NFS User Repository section. The Edit External User Database dialog box opens.
6. Enable or disable TLS encryption for the LDAP connection:
• To enable TLS encryption for the LDAP connection, select the LDAP over TLS checkbox.
• To disable TLS encryption for the LDAP connection, clear the LDAP over TLS checkbox.
7. If TLS encryption is enabled, enable or disable LDAP certificate validation.
• To enable LDAP certificate validation, select the Install LDAP Certificate checkbox. Then, click Upload Certificate and browse
to and select the LDAP SSL certificate to upload to the FluidFS cluster.
• To disable LDAP certificate validation, clear the Install LDAP Certificate checkbox.
8. Click OK.
Disable LDAP Authentication
Disable LDAP authentication if you no longer need the FluidFS cluster to communicate with the directory service.
Steps
1. In the Storage view, select a FluidFS cluster.
2. Click the File System tab.
3. In the File System view, select Client Accessibility.
4. Click the Directory Services tab.
5. Click Edit Settings in the NFS User Repository section. The Edit External User Database dialog box opens.
6. Select None.
7. Click OK.
Managing NIS
In environments that use Network Information Service (NIS), you can configure the FluidFS cluster to authenticate clients using NIS for
access to NFS exports.
Enable or Disable NIS Authentication
Configure the FluidFS cluster to communicate with the NIS directory service. Adding multiple NIS servers ensures continued
authentication of users in the event of a NIS server failure. If the FluidFS cluster cannot establish contact with the preferred server, it will
attempt to connect to the remaining servers in order.
Steps
1. In the Storage view, select a FluidFS cluster.
2. Click the File System tab.
3. In the File System view, select Client Accessibility.
4. Click the Directory Services tab.
5. Click Edit Settings in the NFS User Repository section. The Edit External User Database dialog box opens.
6. Enable or disable NIS:
• To disable NIS, select the None checkbox.
• To enable NIS, select the NIS checkbox.
FluidFS Administration
367