book

LDAP Authentication for IBM DS8000 Systems

by Bert Dufrasne, Juan Brandenburg, Leandro De Souza Lopes, Omar Hassan

March 2018

Intermediate to advanced

112 pages

2h 43m

English

IBM Redbooks

Read now

Unlock full access

Trademarks
AuthorsNow you can become a published author, too!Comments welcomeStay connected to IBM Redbooks
1.1 DS8000 LDAP authentication overtime1.2 Overview of LDAP-based authentication for the DS80001.3 DS8000 basic user management and access1.4 Directory services and LDAP1.5 Benefits for DS8000 administrators and users
2.1 The test environment2.2 Installing the LDAP servers2.3 Installing the Copy Service Manager servers2.4 Updating the embedded Copy Service Manager2.4.1 Download of IBM DSCLI2.4.2 Checking CSM release installed on HMCs2.4.3 Downloading CSM for upgrade on HMC2.4.4 Updating CSM on the HMC using DSCLI2.5 Defining the CSM topology for DS8000 LDAP authentication2.6 Configuring the CSM servers for LDAP authentication2.6.1 Configuring LDAP using CSM GUI2.6.2 Configuring LDAP by using the CSM command line2.7 Creating or exporting the CSM truststore file2.7.1 Getting the truststore for CSM stand-alone servers2.7.2 Creating the truststore file for CSM installed on the DS8000 HMC2.8 Enabling TLSv1 on CSM for old DS8000 systems2.9 Configuring the DS8000 for LDAP authentication2.9.1 Using DSGUI on code levels older than R8.1 (88.10.x.x)2.9.2 Using DSGUI on code levels at R8.1 (88.10.x.x) or higher2.9.3 Configuring DS8000 LDAP authentication by using the DS CLI2.9.4 Mapping LDAP users and groups to DS8000 Security Administrator role
3.1 DS8000 roles and authorization levels3.2 Managing user mappings in DSGUI with code levels older than R8.13.2.1 Adding a user mapping3.2.2 Removing a user mapping3.2.3 Modifying a user mapping3.3 Managing user mappings by DSGUI on code levels higher than R8.13.3.1 Adding a new user mapping3.3.2 Removing a user mapping3.3.3 Modifying a user mapping3.4 Managing user mappings by DSCLI3.4.1 Adding a user mapping3.4.2 Removing a user mapping3.4.3 Modifying a user mapping
A.1 Preparation stepsA.2 Install Copy Services Manager
B.1 Configuring Copy Services Manager for LDAPB.2 Testing Copy Services Manager for LDAP
C.1 Certificate export on Microsoft Internet ExplorerC.2 Certificate export in Google Chrome
D.1 Directory tree detailsD.2 Directory with DS8000 user information

IBM RedbooksOther publicationsOnline resourcesHelp from IBM

Content preview from LDAP Authentication for IBM DS8000 Systems

Preface

The IBM® DS8000® series includes the option to replace the locally based user ID and password authentication with a centralized directory-based approach.

This IBM Redpaper™ publication helps DS8000 storage administrators understand the concepts and benefits of a centralized directory. It provides the information that is required for implementing a DS8000 authentication mechanism that is based on the Lightweight Directory Access Protocol (LDAP).

Starting with DS8000 Release 7.5, directory-based authentication relies on IBM Copy Services Manager (CSM) that provides the interface (the CSM LDAP client) between the DS8000 and external LDAP servers.

Authors

This paper was produced by a team of specialists from around the world:

Bert Dufrasne ...