Isilon: InsightIQ 4.1: Configuring Active Directory authentication

Summary: How to configure Active Directory authentication over LDAP with InsightIQ.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

InsightIQ configuration:
  1. Log in to InsightIQ web administration interface.
  2. Click SETTINGS tab.
  3. Click Users on the SETTINGS ribbon.
  4. Click Configure LDAP.
  5. Check Enable LDAP. Enabling LDAP allows you to edit the remaining fields on this page.
  6. Type Active Directory (AD) server (Domeain Controler) URI into the LDAP server field. Server URI should begin with ldap:// or ldaps://. Port is optional.
  7. Type the Base Search Entry. Distinguished Name (DN) of the entry to start searches at. If your AD domain is domain.com, your DN would be dc=domain,dc=com.
  8. Type AD server credentials in the Bind entry and Bind password fields. The Bind Entry should have the format of "user@domain". For example: ldap_service@emc.com
  9. Click link: Show optional setings.
  10. Type user into Object Class for users field. Attribute that defines a user on this server.
  11. Type group into Object Class for groups field. Attribute that defines a group on this server.
  12. Click Submit.
Active Directory server configuration:
**NOTE** InsightIQ 4.1.2 supports logging in via sAMAccountName.
If you are running InsightIQ 4.1.2, you do not need to configure gidNumber or uid attributes in your Active Directory server.

On the Active Directory server confirm following attributes for groups and users.
1. Groups have to have a valid, configured gidNumber attribute.
2. Users have to have their uid set and it should be the same as their sAMAccountName attribute.

Additional Information

Tools, resources used while reproducing the issue/configuration in a lab environment:
  • IIQ 4.1 vm
  • Windows 2012 AD
  • Wireshark to verify IIQ LDAP requests and responses from AD.
  • Softerra LDAP Browser to verify LDAP / AD servers Distinguished Names and users and groups attributes.
To verify groups and users attributes in the Active Directory:
  1. Log in to Domain Controller.
  2. Go to Active Directory Users and Computers.
  3. Click View tab.
  4. Click/check Advanced Features.
  5. Navigate to Users and open Properties window of related group or user.
  6. Navigate to and click on the Attribute Editor.

Affected Products

Isilon InsightIQ

Products

Isilon, Isilon InsightIQ
Article Properties
Article Number: 000022639
Article Type: How To
Last Modified: 15 Dec 2022
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.