Administrator Guide

Enable or Disable TLS Encryption for the LDAP Connection
Enable TLS encryption for the connection from the FluidFS cluster to the LDAP server to avoid sending data in plain text. To validate the
certicate used by the LDAP server, you must export the LDAP SSL certicate and upload it to the FluidFS cluster.
1 In the Storage view, select a FluidFS cluster.
2 Click the File System tab.
3 In the File System view, select Client Accessibility.
4 Click the Directory Services tab.
5 Click Edit Settings in the NFS User Repository section. The Edit External User Database dialog box opens.
6 Enable or disable TLS encryption for the LDAP connection:
• To enable TLS encryption for the LDAP connection, select the LDAP over TLS checkbox.
• To disable TLS encryption for the LDAP connection, clear the LDAP over TLS checkbox.
7 If TLS encryption is enabled, enable or disable LDAP certicate validation.
• To enable LDAP certicate validation, select the Install LDAP Certicate checkbox. Then, click Upload Certicate and browse to
and select the LDAP SSL certicate to upload to the FluidFS cluster.
• To disable LDAP certicate validation, clear the Install LDAP Certicate checkbox.
8 Click OK.
Disable LDAP Authentication
Disable LDAP authentication if you no longer need the FluidFS cluster to communicate with the directory service.
1 In the Storage view, select a FluidFS cluster.
2 Click the File System tab.
3 In the File System view, select Client Accessibility.
4 Click the Directory Services tab.
5 Click Edit Settings in the NFS User Repository section. The Edit External User Database dialog box opens.
6 Select None.
7 Click OK.
Managing NIS
In environments that use Network Information Service (NIS), you can congure the FluidFS cluster to authenticate clients using NIS for
access to NFS exports.
Enable or Disable NIS Authentication
Congure the FluidFS cluster to communicate with the NIS directory service. Adding multiple NIS servers ensures continued authentication
of users in the event of a NIS server failure. If the FluidFS cluster cannot establish contact with the preferred server, it will attempt to
connect to the remaining servers in order.
1 In the Storage view, select a FluidFS cluster.
2 Click the File System tab.
3 In the File System view, select Client Accessibility.
4 Click the Directory Services tab.
5 Click Edit Settings in the NFS User Repository section. The Edit External User Database dialog box opens.
6 Enable or disable NIS:
FluidFS Administration
399