HP 3PAR Command Line Interface Administrator's Manual: HP 3PAR OS 3.1.2 (QR482-96525, September 2013)

• (Optional) Set the CA certificate using the following command:
◦ setauthparam ladp-ssl-cacert <certificate>
• Configure account location parameters using the following commands:
setauthparam accounts-dn <DN_path>◦
◦ setauthparam account-obj user
◦ setauthparam account-name-attr sAMAccount
◦ setauthparam memberof-attr memberOf
◦ checkpassword <user_name>
• Configure group-to-role mapping parameters using the following commands:
setauthparam <map_param> <map_value>◦
◦ checkpassword <user_name>
Each step in the process above is discussed in the following sections. Each section is followed by
an example showing the implementation of the instructions described.
Configuring Connection Parameters
To configure connection parameters:
1. If not already known, obtain the LDAP server’s host name by running the ldapsearch
command or using ldp.exe (available as part of the downloadable Windows Support Tools
from Microsoft). You must know the LDAP server’s IP address.
NOTE: If you do not have access to the ldapsearch command, use the ldp.exe command.
• Issue the ldapsearch command and record the displayed dnsHostName (the value
used for the ldap-server-hn parameter; this is only necessary when setting CA
certificates).
• Run ldp.exe as follows:
1. Click Start→Run.
2. In the Open box, enter ldp and click OK.
3. The Ldp window opens.
4. In the Ldp window, click Connection→Connect.
5. In the Server box, enter the Active Directory server’s IP address and click OK.
The root DSE attributes and values are displayed in the right-side pane.
6. Record the displayed dnsHostName (the value used for the ldap-server-hn
parameter; only necessary if setting CA certificates).
2. Set the address to which the LDAP server will connect by issuing the setauthparam
ldap-server <IP_address> command, where <IP_address> is your LDAP server’s IP
address.
28 Managing User Accounts and Connections