You can use the Remote Authentication page to configure Unified Manager to communicate with your authentication server to authenticate remote users who attempt to log into the Unified Manager web UI.
You must have the OnCommand Administrator or Storage Administrator role.
After you select the Enable remote authentication checkbox, you can enable remote authentication using an authentication server.
Specifies the administrator name of the authentication server.
Specifies the password to access the authentication server.
Specifies the location of the remote users in the authentication server. For example, if the domain name of the authentication server is ou@domain.com, then the base distinguished name is cn=ou,dc=domain,dc=com.
Specifies whether to enable or disable the nested group lookup option. By default this option is disabled. If you use Active Directory, you can speed up authentication by disabling support for nested groups.
Specifies the authentication service used for communicating with authentication servers.
Specifies the bind distinguished name that is used along with the base distinguished name to find remote users in the authentication server.
Specifies the password to access the authentication server.
Specifies the location of the remote users in the authentication server. For example, if the domain name of the authentication server is ou@domain.com, then the base distinguished name is cn=ou,dc=domain,dc=com.
Specifies that Secure LDAP is used for communicating with LDAPS authentication servers.
Specifies the bind distinguished name that is used along with the base distinguished name to find remote users in the authentication server that you have configured.
Specifies the password to access the authentication server.
Specifies the location of the remote users in the authentication server. For example, if the domain name of the authentication server is ou@domain.com, then the base distinguished name is cn=ou,dc=domain,dc=com.
Specifies the Lightweight Directory Access Protocol (LDAP) version that is supported by your authentication server. You can specify whether the protocol version must be automatically detected or set the version to 2 or 3.
Specifies the name of the attribute in the authentication server that contains user login names to be authenticated by the management server.
Specifies a value that assigns the management server group membership to remote users based on an attribute and value specified in the user's authentication server.
If the remote users are included as members of a GroupOfUniqueNames object in the authentication server, this option enables you to assign the management server group membership to the remote users based on a specified attribute in that GroupOfUniqueNames object.
Specifies whether to enable or disable the nested group lookup option. By default this option is disabled. If you use Active Directory, you can speed up authentication by disabling support for nested groups.
Specifies the attribute name that your authentication server uses to store information about the individual members of a group.
Specifies the object class of a user in the remote authentication server.
Specifies the object class of all groups in the remote authentication server.
Specifies the authentication service used for communicating with authentication servers.
Enables you to add an authentication server.
If the authentication server that you are adding is part of an high-availability pair (using the same database), you can also add the partner authentication server. This enables the management server to communicate with the partner when one of the authentication servers is unreachable.
Enables you to edit the settings for a selected authentication server.
Deletes the selected authentication servers.
While testing, if you specify only the user name, the management server searches for the remote user in the authentication server, but does not authenticate the user. If you specify both the user name and password, the management server searches and authenticates the remote user.
You cannot test the authentication if remote authentication is disabled.