Hp Secure Key Manager User Manual Page 133

  • Download
  • Add to my manuals
  • Print
  • Page
    / 327
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 132
Table 51 LDAP Schema Properties section components
Component Description
User Base DN
The base distinguished name (DN) from which to begin the search for usernames.
User ID Attribute
The attribute type for the user on which to search. The attribute type you choose must
result in globally unique users.
User List Filter
The search lter for users, for example:
(& (objectClass=user) (objectCategory=person))To specify all,
use
(objectClass=*)
Group Base DN
The base DN from which to begin the search for groups.
Group ID Attribute
The attribute type for the group on which to search.
Group List Filter
The search lter for groups, for example:
(objectClass=group)
Group Member
Attribute
The Group Member Attribute is the attribute that is used to search for a user within a
group, for example, member. The format of the Group Member attribute may be a
user ID or a DN and is determined by the next setting.
Group Member
Attribute Format
The Group Member attribute can take one of two formats:
User ID
User DN
Search Scope
The Search Scope determines how deep within the LDAP user directory the KMS
Server searches for a user or group.
One Level: search only the children of the base node
Subtree: search all the descendents of the base node. Depending on the size of
your LDAP directory, this can be very inefcient.
NOTE:
The LDAP protocol supports four search scopes: base, one level, subtree and
children. The KMS Server allows you to specify only one level and subtree at this
time. You should note that subtree includes base and children, so by specifying
subtree, the search scope includes subtree, base, and children.
Edit Click Edit to modify the properties.
Clear Click Cle
ar to remove the current properties.
LDAP Failover Server Properties
Use the LDAP Failover Server Properties section to dene a backup LDAP server to use in case the
main LDAP server becomes inaccessible due to a non-timeout error. When the primary LDAP server is
down, the SKM shifts to the failover LDAP server and periodically retry the main server to see if it has
become accessible again.
Figure 7
2 Viewing the LDAP Failover Server Properties section
The foll
owing table describes the components of the LDAP Failover Server Properties section.
Secure Key Manager
13 3
Page view 132
1 2 ... 128 129 130 131 132 133 134 135 136 137 138 ... 326 327

Comments to this Manuals

No comments