Cisco Prime DCNM and Active Directory (LDAP)

[Dawit Zeru]

Hi all,

I have a DCNM 6.3.2, and I'm trying to connect it to the Active Directory but without any success.

can someone please explain me how to do it.

I read the Cisco DCNM Fundamentals Guide, Release 6.x, but it was not clear enough can someone assist,

thanks in advance.

[AFROJ AHMAD]

Hi ,

can you try this :

Open DCNM Web Client > Click Admin > Under Management Users select Remote AAA

From here you can change the Auth Mode to one of the following:

Local | Radius | TACACS+ | Switch | LDAP

enter the details..

Click Apply to submit changes.

Thanks-

Afroz

***Ratings Encourages Contributors ***

[Dawit Zeru]

i opened a tac and after some investigation they found out that and its funny

when configuring LDAP on the DCNM a user can only access using is full name (i.e the display name), and not the login name.

here is an explanation:

when a user is configured the Active Directory, the user are configured with two sets of name:

1. Is full name. 

First Name: User.

Last Name: Test

Full Name: User Test

2. A short name for login

Login Name: Utest

the DCNM LADP atribute for login is the full and not the short name.

[Eric Scott]

Hi Dawit,

Can you provide the LDAP parameters exactly as they've been entered in DCNM?

Most commonly we see that the filter field on the [Admin > Remote AAA > LDAP] page is incorrect, because the example configuration is misleading/wrong.  The filter field should not contain 'CN='.

For example my lab server has a working LDAP config like this,

.

Also, once you've entered the LDAP parameters use the "Test" button and try out your login credentials.  Please share your result whether it says success or failure, because it will help us isolate where the problem is.

And finally, make sure that the DCNM services have been restarted after the authentication method is set to LDAP.  A restart of the services is required for this to work.

-Eric

[garygrubb]

Hi Eric,

I'm having some trouble getting DCNM to authenticate via LDAP. Could you please share a screen shot of a known working configuration so I can compare & setup mine accordingly?