OpenManage Enterprise 4.0.x User's Guide

Before you begin directory service integration:

• The BindDN user and the user that is used for 'Test connection' should be the same.
• If the User Login attribute is provided, only the corresponding username value that is assigned to the attribute is allowed for appliance login.
• The user that is used for Test connection should be part of any nondefault group in LDAP.
• Attribute of Group Membership should have either the 'userDN' or the short name (used for logging in) of the user.
• When a MemberUid is used as 'Attribute of Group Membership,' the username that is used in appliance login is considered case sensitive in some LDAP configurations.
• When the search filter is used in LDAP configuration, user logins are not allowed for those users who are not part of the search criteria mentioned.
• Group search works only if the groups have users that are assigned under the provided Attribute of Group Membership.
• DNS should be set to return IPv6 as preferred address when queried with FQDN.
• DC certificate must have IPv6 in the SAN field.

To use directory services:

1. Add a directory connection as described in Add or edit the Active Directory connection.
2. Import directory groups and map all users in the group to a role as described in Import Active Directory and LDAP groups.
3. Device managers should edit the directory groups to add the groups they can manage as described in Add or edit local users.