Configuring an OpenLDAP Directory service

For OpenLDAP, you must configure all the Organizational Units (OU) where the users and groups exist, separately. The user and the group must be part of the OU. For group OUs, you can configure just the top-level group OU. For user OUs, the complete nested user OUs must be configured as a single parameter. Enter all the OUs of the users that are granted permission to login to the appliance in separate fields. Users and groups must exist in the OUs entered.

NOTE:

HPE OneView supports groups that have an objectclass, either groupOfNames or groupOfUniqueNames.

  • Example 1:

    Users exist in OU=users, and groups exist in OU=groups.

    Possible configuration:

    First OU: OU=users

    Second OU: OU=groups

  • Example 2:

    Users exist in nested OUs (example, OU=Engineering,OU=Americas,OU=Users), and groups exist in nested OUs (example, OU=EngineeringGroups,OU=AmericasGroups,OU=groups)

    Possible configuration 1:

    First OU: OU=Engineering,OU=Americas,OU=Users

    Second OU: OU=groups

    Possible configuration 2:

    First OU: OU=Engineering,OU=Americas,OU=Users

    Second OU: OU=AmericasGroups,OU=groups

    Possible configuration 3:

    First OU: OU=Engineering,OU=Americas,OU=Users

    Second OU: OU=EngineeringGroups,OU=AmericasGroups,OU=groups

    More information