Registering node and administrative IDs

Edit online

A Lightweight Directory Access Protocol (LDAP) server administrator creates user IDs in an Active Directory database on an LDAP server. You can then register these IDs on the IBM Storage Protect server as node or administrative IDs and specify that they authenticate to the LDAP server.

About this task

You can also register an IBM Storage Protect node ID or administrative ID for authentication with the LDAP server even if a corresponding user ID does not yet exist on the LDAP server. The LDAP server administrator then can create the corresponding user ID.

For administrative IDs, use the following format:

id@domain_name

where id represents the ID and domain_name represents the domain. For example, you can specify an administrative ID like this:

JackSpratt@us.example.com

The preferred method is to use the same format for node names; however, this format is not required.

Restriction: Ensure that administrative IDs and node names do not match. If an administrative ID matches a node name, you might see unexpected behavior because of automatic password changes that update the same password twice. As a result, the password might become unknown to the administrative ID. Alternatively, the password update operation might fail.

Note: The IBM Storage Protect provides several different command-line interfaces for managing IBM Storage Protect servers. For more information, see Managing the server from the command line.

Procedure

To register an LDAP user ID as an IBM Storage Protect node ID that authenticates with the LDAP server, issue the REGISTER NODE command from the IBM Storage Protect command-line interface. Specify LDAP as the authentication method:
```
register node node_name authentication=ldap
```
where node_name specifies the name of the node.
For example, if the node is named NODE1, and the node is associated with a US company named EXAMPLE, issue the following command:
```
register node node1@us.example.com authentication=ldap
```
Tip: If you are using the Operations Center, you can register a client node by clicking Clients in the menu bar and then clicking +Client. In the Add Client wizard, on the Identity page, select LDAP as the authentication method.
To register an LDAP user ID as an IBM Storage Protect administrative ID that authenticates with the LDAP server, issue the REGISTER ADMIN command from the IBM Storage Protect command-line interface. Specify LDAP as the authentication method:
```
register admin admin_name authentication=ldap
```
where admin_name specifies the administrative user ID.
For example, if the administrator name is ADMIN1, and the administrator is associated with a US company that is named EXAMPLE, issue the following command:
```
register admin admin1@example.us.com authentication=ldap
```
To register all new node and administrative IDs to authenticate with an LDAP server, issue the SET DEFAULTAUTHENTICATION command and specify LDAP as the authentication method:
```
set defaultauthentication ldap
```
Any REGISTER NODE or REGISTER ADMIN commands that are issued after you issue the SET DEFAULTAUTHENTICATION command create nodes and administrators that can authenticate with the LDAP server.

Results

After you register a node or administrative ID to authenticate with the LDAP server, the ID will be authenticated against the Active Directory database.