LDAPURL
The LDAPURL option specifies the location of your LDAP directory server. Set the LDAPURL option after you configure the LDAP directory server.
Restrictions:
- The LDAPURL option cannot be used in combination with the SETOPT command.
- The LDAPURL option does not apply to storage agents.
Parameters
- ldap_url_value
- Specifies the URL of one LDAP directory server, or the URLs of
multiple LDAP directory servers. You can enter multiple values, with
each URL value up to 1024 characters. The port number is optional
and defaults to 389. Each URL value must contain the following parameters:
- An LDAP directory server name. For example, the format of the server name is server1.storage.us.ibm.com and the LDAP port is 389.
- The base distinguished name (Base DN) of the namespace or suffix that the LDAP directory server maintains. Ensure that the DN format conforms to the format that is used on the selected directory server. For example, the format of the Base DN is ou=tsm,dc=storage,dc=us,dc=ibm,dc=com.
- If you specify multiple URLs, each URL must be on a separate line.
- If you specify multiple URLs, each URL must point to a different external directory, and all external directories must contain the same data.
- Each URL must begin with ldap://.Restriction: The URL that you designate cannot begin with ldaps://.
Tivoli® Storage Manager supports LDAP connections that are secured with the standard LDAPv3 StartTLS operation that establishes a secure Transport Layer Security (TLS) exchange on an existing LDAP connection. The LDAP Simple Bind operation that Tivoli Storage Manager uses does not protect the password when it is sent. A secure TLS connection is needed to protect the password.
Example: Set the LDAP port value for a directory server
In the dsmserv.opt file, specify the following port value as 389, for LDAP directory servers, Windows Active Directory servers, and other directory servers:ldapurl ldap://server1.storage.us.ibm.com:389/ou=tsm,dc=storage,dc=us,dc=ibm,dc=com
Tip: To use the default port, you do not have to specify it.