topic LDAP config page: Example values for ADS? in Controllers

LDAP config page: Example values for ADS?

heinz.rietmann — Fri, 01 Mar 2019 12:24:54 GMT

Can anyone please give me a hint which values I have to enter in the LDAP config page to access a LDAP service on a Active Directory Server?

Cheers,

Heinz

Re: LDAP config page: Example values for ADS?

bklauser — Thu, 04 Dec 2014 21:41:24 GMT

Heinz,

... thanks for posting - have you had a chance to look at pages 36/37 of the draft deployment guide? Could you refine which parameters are unclear and what LDAP server you're integrating with?

fyi: quoting from the guide

Step 1 In the Home window, click the Settings button at the top right corner of the screen. The Settings window then appears.

Step 2 Click LDAP Credentials in the Settings navigation pane to view the LDAP Credentials window.

Step 3 In the LDAP Credentials window, enter your LDAP username.

Step 4 Enter your LDAP password.

Step 5 Enter the LDAP server URL address. For example, enter a URL address such as ldap://ldap.cisco.com:389.

Step 6 Enter the security principal. The security principal is the name of the user or program performing authentication. For

example, enter a value such as OU=active, OU=employees, OU=people, O=cisco.com.

Step 7 Enter the security authentication. The security authentication is the mechanism to use. For example, enter a value such

as simple or SASL.

Step 8 Enter the Group Attribute. For example, enter a value such as group membership.

Step 9 Click the Add button to save your LDAP configuration to the Cisco APIC-EM database.

hth,

Bruno

Re: LDAP config page: Example values for ADS?

heinz.rietmann — Mon, 08 Dec 2014 18:17:50 GMT

Hi Bruno

Looks easy, thanks for the hint!

I found a additional note in the deployment guide:

With this Cisco APIC-EM release, the controller does not access any user identity information from Active

Directory.

Therefore I will just omit it for the moment.

Thanks anyway!
Heinz

Re: LDAP config page: Example values for ADS?

aradford — Sat, 10 Jan 2015 01:28:21 GMT

The LDAP setttings are for group information. Identity information is obtained through PxGrid (Cisco Identity Services Manager) or radius proxy.

Adam