Administrator Guide

For example:
Relative Base: OU=SAN Controllers
(No escapes necessary)
Relative Base: OU=SAN\+Controllers
(The plus character is escaped)
Relative Base: OU=Buildings A\,B\,C,OU=SAN \+Controllers
(Commas and plus sign are escaped
except for the comma separating the
RDNs.)
• In the Storage Center Hostname field, type the fully qualified domain name (FQDN) of the Storage Center.
• For a single-controller Storage Center system, this is the fully qualified host name for the controller IP address.
• For a dual-controller Storage Center system, this is the fully qualified host name for the management IP address.
• In the LDAP Domain field, type the LDAP domain to search.
• In the Authentication Bind DN field, type the Distinguished Name or User Principal Name of the user that the Storage Center
uses to connect to and search the LDAP server.
• In the Authentication Bind Password field, type the password for the authentication bind Distinguished Name.
8. (Optional) Click Test Server to verify that the Storage Center can communicate with the specified directory servers using the
selected protocol.
9. (Optional) If Transport Layer Security (TLS) is enabled, upload a Certificate Authority PEM file.
a) Click Upload Certificate.
b) Browse to the location of the PEM file, select the file, and click Open. The Upload TLS Certificate dialog box opens.
NOTE:
If you select the wrong PEM file, click Upload Certificate in the Upload TLS Certificate dialog box to select
a new file.
c) Click OK to upload the certificate.
10. Click Next. The Kerberos Settings page opens.
11. (Optional) Select the Enabled checkbox to enable Kerberos authentication.
12. To change any of the Kerberos settings, clear the Auto-Discover checkbox, and then type a new value into that field.
• Kerberos Domain Realm: Kerberos domain realm to authenticate against. In Windows networks, this is the domain name in
uppercase characters.
• KDC Hostname or IP Address: Fully qualified domain name (FQDN) or IP address of the Key Distribution Center (KDC) to which
Storage Center will connect.
• Password Renew Rate (Days): Number of days before the keytab is regenerated. The default value is 0, which equates to a
password renew rate of 14 days.
13. Click Next.
The Join Domain page opens.
14. Type the user name and password of a domain administrator.
15. Click Next.
The Summary page opens.
16. If you want to change any setting, click Back to return to the previous page.
17. Click Finish.
18. Click OK.
Managing Directory Service Users
Directory service users can be individually granted access to a Storage Center.
NOTE: For user interface reference information, click Help.
Storage Center Maintenance 117