6.5 HP StoreAll OS CLI Reference Guide

Table Of Contents
ibrix_ldapconfig
Configures LDAP as the primary user authentication method for SMB shares.
Description
The ibrix_ldapconfig command configures LDAP as the primary authentication method for
users accessing SMB shares on a StoreAll file system.
IMPORTANT: Before using ibrix_ldapconfig to configure LDAP on the cluster nodes, you
must configure the remote LDAP server. For more information, see the HP StoreAll Storage File
System User Guide. LDAP authentication cannot be used with Active Directory.
Synopsis
Add an LDAP configuration and enable LDAP:
ibrix_ldapconfig -a -h LDAPSERVERHOST [-P LDAPSERVERPORT] -b LDAPBINDDN
-p LDAPBINDDNPASSWORD -w LDAPWRITEOU -B LDAPBASEOFSEARCH -n NETBIOS -E
ENABLESSL [-f CERTFILEPATH]
Modify an LDAP configuration:
ibrix_ldapconfig -m -h LDAPSERVERHOST [-P LDAPSERVERPORT] [e|D] [-b
LDAPBINDDN] [-p LDAPBINDDNPASSWORD] [-w LDAPWRITEOU] [-B
LDAPBASEOFSEARCH] [-n NETBIOS] [-E ENABLESSL] [-f CERTFILEPATH]
View the LDAP configuration:
ibrix_ldapconfig -i
Enable LDAP:
ibrix_ldapconfig -e LDAPSERVERHOST
Disable LDAP:
ibrix_ldapconfig -d LDAPSERVERHOST
Options
DescriptionOption
Specifies the LDAP base for searches. This is normally the root suffix of the directory, but
you can provide a base lower down the tree for business rules enforcement, ACLs, or
performance reasons. For example, ou=people,cd=enx,dc=net.
-B LDAPBASEOFSEARCH
Disables LDAP.-d
Specifies the type of certificate required. Enter 0 for no certificate, 1 for TLS, or 2 for SSL.-E ENABLESSL
The LDAP server port (TCP port 389 for unencrypted or TLS encrypted; 636 for SSL
encrypted).
-P LDAPSERVERPORT
Adds an LDAP configuration and enables LDAP.-a
The LDAP User Account used to authenticate to the LDAP server to read data. This account
must have privileges to read the entire directory. Write credentials are not required. For
example: cn=hp9000-readonly-user,dc=enxt,dc=net.
-b LDAPBINDDN
Enables LDAP.-e
The path to the TLS or SSL certificate file, such as /usr/local/ibrix/ldap/key.pem.-f CERTFILEPATH
The LDAP server host (server name or IP address).-h LDAPSERVERHOST
Displays the LDAP configuration.-i
Modifies the LDAP configuration.-m
122 StoreAll commands