Specifying a user ID and password for the IBM Storage Protect server

Edit online

To ensure that the IBM Storage Protect server can use the services of the Lightweight Directory Access Protocol (LDAP) server, you must specify a user or account ID that can log on to the LDAP server. You must also specify a password.

Before you begin

Obtain an appropriate user or account ID from the LDAP server administrator. The ID must meet the following requirements:

The ID must be registered on the LDAP server or on the Active Directory system.
The ID must have read access to the accounts on the LDAP server that are used for authentication.
To modify IDs or reset passwords for IDs on the LDAP server, the specified ID must have write authority for accounts on the LDAP server. (The preferred method is to manage Active Directory IDs and passwords on the Active Directory system.)

The ID might be similar to the following example:

JackSpratt@us.example.com

Note: The IBM Storage Protect provides several different command-line interfaces for managing IBM Storage Protect servers. For more information, see Managing the server from the command line.

Procedure

Specify a user ID that can log on to the LDAP server. Issue the SET LDAPUSER command.
For example, to specify an administrator with a user ID of JACKSPRATT, who represents a US company that is named EXAMPLE, issue the following command:
```
set ldapuser JackSpratt@us.example.com
```
Tip: When you specify the user ID, you can use both uppercase and lowercase letters because the IBM Storage Protect server distinguishes case for LDAP user IDs.
Define a password for the specified user ID by issuing the SET LDAPPASSWORD command.
Restrictions:
- The maximum length of the password is 64 characters.
- If you have equal signs within the password, you must enclose the password in quotation marks.
- You can use the following characters:
```
a b c d e f g h i j k l m n o p q r s t u v w x y z
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
0 1 2 3 4 5 6 7 8 9
~ ! @ # $ % ^ & * _ - + = ` | ( ) { } [ ] : ; < > , . ? /
```
For example, issue the following command:
```
set ldappassword "boX=T^p$"
```
Tip: When you specify the password, you can use both uppercase and lowercase letters because the IBM Storage Protect server distinguishes case for LDAP passwords.

What to do next

To verify that the LDAP server is set up correctly, complete the following steps on the IBM Storage Protect server:

Test the forward-DNS and reverse-DNS lookup function of the LDAP server.
Test the network connection with the LDAP server.
Use an LDAP utility test to connect to the LDAP server and conduct a search without using the Transport Layer Security (TLS) protocol.
Use an LDAP utility test to connect to the LDAP server and conduct a search by using TLS.