Dell EMC OpenManage Enterprise 3.9 User's Guide

Add or edit Active Directory groups to be used with Directory Services

1. Click Application Settings > Users > Directory Services, and then click Add.
2. In the Connect to Directory Service dialog box, by default, AD is selected to indicate that directory type is Active Directory (AD):
   NOTE To create an LDAP user group by using Directory Services, see Add or edit Lightweight Directory Access Protocol groups to be used with Directory Services.
   1. In the Directory Name box, enter a desired name for the AD directory.
   2. Select the Domain Controller Lookup method:
      • DNS: In the Method box, enter the domain name to query DNS for the domain controllers.
      • Manual: In the Method box, enter the FQDN or the IP address of the domain controller(s). For multiple servers, you can use a comma-separated list with a maximum of three servers.
   3. In the Group Domain box, enter the group domain as suggested in the tool tip syntax.
3. In the Advanced Options section:
   1. In the Server Port field, Global Catalog Address port number 3269 is populated by default. For the Domain Controller Access, enter 636 as the port number.
      NOTE Only LDAPS ports are supported.
   2. Enter the Network Timeout and Search Timeout duration in seconds. The maximum timeout duration supported is 300 seconds.
      NOTE To avoid timeout when using Manual Lookup on multiple domain controllers, ensure that the sum of individual Search Timeout value does not exceed the Network Timeout time. For example, if you have a comma-separated list with 3 FQDN or IP addresses, with a Network Timeout value of 300 seconds, then the Search Timeout must not exceed 100 seconds.
   3. To upload an SSL certificate, select Certificate Validation and click Select a file. The certificate should be a Root CA Certificate encoded in Base64 format.
   The Test connection tab is displayed.
4. Click Test connection.
5. In the dialog box, enter the username and password of the domain to be connected to.
   NOTE The username must be entered in either the UPN (username@domain) or in the NetBIOS (domain\username) format.
6. Click Test connection.
   In the Directory Service Information dialog box, a message is displayed to indicate successful connection.
7. Click Ok.
8. Click Finish.
   A job is created and run to add the requested directory in the Directory Services list.