HP StoreOnce Enterprise Manager User Guide
6 Performing administration procedures
On the Navigation tree, administration tasks are available only to administrators. From here, the
administrator can perform a number of important procedures in the following categories:
• “Managing the authentication mechanism ” (page 94)
• “Using user management functions” (page 95)
• “Using group management functions” (page 97)
• “Performing device management functions” (page 107)
NOTE: The Administration tasks are not available to and cannot be seen by anyone with user-level
permissions.
Managing the authentication mechanism
Enterprise Manager supports two types of authentication mechanisms:
• Local authentication—Enterprise Manager stores the authentication information.
• LDAP (Lightweight Directory Access Protocol) authentication—The HP StoreOnce Enterprise
Manager uses the information stored in the LDAP to authenticate users.
Enterprise Manager supports both Authentication types simultaneously; there is no need to switch
between them.
Configuring LDAP authentication
To configure the LDAP authentication, use the following procedures:
• “Adding a new LDAP server” (page 94)
• “Reconfiguring an existing LDAP server” (page 94)
• “Removing an LDAP server” (page 95)
Adding a new LDAP server
IMPORTANT: If you want to configure an LDAP server with the DIGEST-MD5 encryption
mechanism, you must enter a fully-qualified name in the Server field. DIGEST-MD5 does not work
with the Server IP.
To add a new LDAP server:
1. From the Navigation tree, select Administration.
2. On the AD Authentication tab, click Add.
The Add a new LDAP server dialog box appears.
3. Type the appropriate information into each field. After all the information is complete, click
Add.
a. If you cannot connect to the LDAP server, an error message appears. Click OK to close
the dialog box.
b. If the information is correct, a success message appears. Click OK to close the dialog
box.
Reconfiguring an existing LDAP server
The modify option does not allow you to change an existing server to a new server. You can use
either an IP address or a fully-qualified server name, depending on the encryption mechanism.
94 Performing administration procedures