Hello jvang,

For LDAPS, refer the notes for certificate requirement, select the "Use LDAPS Protocol" first and "Upload Certificate". The certificate must be base64 encoded, full certificate chain (unless self signed) with file extension .cer

Then configuration can be entered like this (Note the port number, 636 for LDAPS):

Here is the link to the KB that also shows how to apply the certificate. You will need to login with your EMC account. https://dell.to/30xNLS5

Please let us know if you have any other questions.

Hello Jvang,

I am not seeing any way to make it use just hostname.  In all configure guides and manuals I see you need to have an IP address.

Please let us know if you have any other questions.

Hello Jvang,

Did you try to use UEMCLI configuration listed in this link & did it complete successfully?

https://dell.to/30xNLS5

Please let us know if you have any other questions.

Thanks Sam,

The issue is not with uploading the SSL Certificate. The issue is that the LDAPS Server running on our Active Directory servers uses certificates that do not have IP Addresses in them, and when the NAS Server on the Unity attempts to bind to the LDAPS Server, it gets denied because the Unity only lets you enter IP addresses for binding to the LDAPS Servers (not the hostname).

How can I bind the NAS Server on the Unity to an LDAPS Server based on the hostname ot the LDAPS Servers ?

Cheers, JVANG

Hi Sam,

My Active Directory System Administrator indicated they will not put IP Addresses in their certificates. I am waiting to find out why.

Is there no way to bind using a hostname from the CLI ? This seems very limiting, and I don't understand why not, since all other LDAPS implementations we have all support hostnames.

Cheers, Jack...

Hi Sam,

The document you referenced is to bind the Unity to an LDAPS Server, which we did a while ago, and has been working perfectly.

Do you have any references as to how to bind a NAS Server running on the Unity to an LDAPS Server from the UEMCLI Command Line, where it allows me to use the LADPS Server hostname instead of the IP address ?

Cheers, Jack...

LDAP code for the control path (user mgmt) is completely different from use of LDAP in the data path (NAS server)

From what I remember currently only config of LDAP servers via IP is supported for the NAS server.

I would suggest to open a product enhancement request