/> Training Video

Open LDAP (User & Provider Management in the VAST Management System)

This video from VAST Data Customer Education provides a comprehensive guide on OpenLDAP integration within the VAST Management System (VMS). For storage administrators managing VAST clusters, OpenLDAP serves as a flexible identity provider for user and group lookups, particularly for POSIX attributes like UID numbers, GID numbers, and group memberships. We also highlight OpenLDAP’s role in consulting netgroup information. Learn how netgroups, as defined lists of computers within LDAP, can simplify host-based access rules by allowing you to reference groups instead of individual client IP addresses or hostnames. The demonstration walks through the setup process in the VMS GUI, detailing each configuration field:

  • LDAP Server URL(s): Specifying connection protocols and supporting multiple redundant servers and ports.

  • NFSv4 Domain Name: How LDAP can serve as the NFSv4 domain.

  • Bind DN and Password: Providing authentication credentials for LDAP lookups (typically a read-only user), with an option for anonymous bind in advanced settings.

  • Base DN: Defining the search base within your LDAP directory for efficient user and group queries.

  • Attribute Mapping: Customizing how VAST maps LDAP attributes to POSIX properties (e.g., uidNumber, gidNumber, memberUID), with defaults typically suitable for most OpenLDAP environments.

The video emphasizes encryption methods, strongly recommending Start TLS or LDAPS over unencrypted connections, and covers the option to upload custom TLS certificates for server validation. We also discuss different authentication methods (Bind, Anonymous, SASL) and the critical Group Query Mode settings (RFC 2307, RFC 2307 BIS, and the recommended "Compatible" mode) for accurate group membership retrieval. Additionally, learn about advanced settings like Group Base DN for separated user/group OUs, DNS operation mode for netgroup caching, and the option to use this LDAP connection as a VMS authentication provider, enabling LDAP-based login for the VAST Management System UI itself. This tutorial provides VAST Data operators with the in-depth knowledge to effectively configure and integrate OpenLDAP, ensuring robust identity management and granular access control for their enterprise storage environment.

By submitting this form, you consent that the information you provide will be collected and processed in accordance with our Privacy Policy, and may be shared with our partners to help fulfill and follow up on this request.

* Required field.