create storageArray directoryServer
       [domainId="domainId"
       domainNames=("domainName1"..."domainNameN")
       serverUrl="serverUrl"
       [bindAccount="username" bindPassword="password"]
       searchBaseDN="distinguishedName"
       usernameAttribute="attributeName"
       groupAttributes=("attrName1"..."attrNameN")
        [skipConfigurationTest={true | false}]

Parameters

Parameter Description

domainId

Allows you to specify a unique ID for this domain. If not specified, a unique GUID will be generated.

domainNames

Allows you to specify one or more valid domain names for the directory server. If you enter more than one name, separate the values with a space.

serverUrl

Allows you to specify the URL to access the LDAP server in the form of ldap[s]://hostAddress:port. If the LDAPS protocol is used, ensure that the root/intermediate certificate(s) to validate the directory server’s signed certificate is imported using the certificate commands.

bindAccount

Allows you to specify the username or bind ID to be used as the binding account.

bindPassword

Allows you to specify the password to be used as the binding password.

searchBaseDN

Allows you to specify the search base Distinguished Name to search for LDAP user objects for determining group membership.

usernameAttribute

Allows you to specify the attribute to be used to search for user objects for determining group membership. If specified, the string must contain the variable {uid} that will be replaced with the username used during login. Example: sAMAccountName={uid}

groupAttributes

Allows you to set one or more group attributes to be used to look for group Distinguished Names. Distinguished names are used to determine group membership for role mapping.

If you enter more than one group, separate the values with a space.

Using this parameter will clear out existing groups.

skipConfigurationTest

Allows you to skip the configuration test before the configuration is saved. The default is false.

Examples

SMcli -n Array1 -c "create storageArray directoryServer
domainNames=("company.com") serverUrl="ldap://hqldap.company.com:389"
bindAccount="dummyBindDN" bindPassword="dummyPassword"
searchBaseDN="OU=_Users,DC=hq, DC=company,DC=com"
usernameAttributes="sAMAccountName={uid}" groupAttributes="memberOf";"

SMcli completed successfully.