You can configure Performance Manager to use an authentication server, using LDAP or Active Directory, for authenticating user access to Performance Manager.
Authentication with Active Directory or OpenLDAP
You can enable remote authentication on the management server and configure the management server to communicate with your authentication servers so that users within the authentication servers can access Performance Manager.
Enabling remote authentication
You can enable remote authentication using OPEN LDAP or Active Directory so that the management server can communicate with your authentication servers, and so users of the authentication servers can use Performance Manager and manage the storage objects and data.
Disabling nested groups from remote authentication
If you have remote authentication enabled, you can disable nested group authentication so that only individual users and not group members can remotely authenticate to Performance Manager. You might disable nested groups when you want to improve Active Directory authentication response time.
Setting up authentication services
Authentication services enable the authentication of remote users or groups in an authentication server before providing them access to Performance Manager. You can authenticate users by using the predefined authentication services, such as Active Directory or OpenLDAP, or by configuring your own authentication mechanism.
Adding authentication servers
You can add authentication servers and enable remote authentication on the management server to enable remote users within the authentication server to access Performance Manager.
Editing authentication servers
You can change the port that Performance Manager uses to communicate with your authentication server. You cannot configure Secure LDAP (LDAPS).
Testing the configuration of authentication servers
You can validate the configuration of your authentication servers to ensure that the management server is able to communicate with the authentication servers. You can test the configuration by searching for a remote user or group from your authentication servers and authenticate the user or group using the configured settings.
Deleting authentication servers
You can delete an authentication server if you want to prevent Performance Manager from communicating with the authentication server. For example, if you want to change an authentication server that the management server is communicating with, you can delete the authentication server and add a new authentication server.