Specifying the LDAP directory information
This task is part of setting up and using LDAP.
To configure Host On-Demand to use an LDAP directory, complete the following fields on the Host On-Demand
Administration Directory Service window:
- LDAP Type
- Choose the type of LDAP server from the dropdown list. The supported options are:
- IBM LDAP - Select this option when connecting to IBM Tivoli Directory Server.
- OpenLDAP - Select this option to connect to an OpenLDAP server.
- Microsoft AD - Select this option when connecting to Microsoft Active Directory.
- This configuration allows Host On-Demand to apply the correct schema and handle connections based on the selected server type.
- Destination Address
- Type the IP address of the LDAP directory. Use either the host name or dotted decimal
format. The default is the IP address of the Host On-Demand server.
- Destination Port
- Type the TCP/IP port on which the LDAP server will accept a connection from an LDAP client.
The default port is 389.
- Administrator Distinguished Name
- Type the distinguished name (DN) of the directory
administrator that allows Host On-Demand to update information. You must use the LDAP string
representation for distinguished names (for example,
cn=Chris Smith,o=IBM,c=US).
- Administrator Password
- Type the directory administrator's password.
- Distinguished Name Suffix
- Type the distinguished name (DN) of the highest
entry in the directory information tree (DIT) for which information will be saved. Host
On-Demand will store all of its configuration information below this suffix in the DIT.
You must use the LDAP string representation for distinguished names (for example,
cn=HOD,o=IBM,c=US).
 |
If you change the directory service from the
private directory on the local machine to LDAP, you must restart the Service Manager to migrate the Redirector
information into LDAP. The Redirector Service window in the
Administration Utility is not updated with the Redirector information for the LDAP
directory service until you restart the Service Manager.
|
SSL/TLS
- Yes - Enables an encrypted connection with SSL or TLS.
- Ensure that the LDAP server is set up for secure communication and the secure port (usually 636) is specified in the Destination Port field.
- No - Connects with standard, unencrypted LDAP.
Directory schema
An LDAP directory server is shipped with a predefined schema. The object classes that a
directory server can store and the attributes that these objects can contain are defined by its
schema. The schema defines which object classes can be created and where they may be located
within the DIT. In addition, the schema defines the syntax of an object's attributes and specifies
which attributes are required and which are optional.
Related topics