SANtricity 11.9 Commands ( CA08871-194 ~ 196 )
Create storage system directory server
The create storageArray directoryServer command allows you to add a new directory server to be used for authenticating and authorizing users.
Supported Series
This command applies to an individual ETERNUS AB/HB series storage system.
Roles
To execute this command on the ETERNUS AB/HB series storage system, you must have the Security Admin role.
Syntax
create storageArray directoryServer
[domainId="domainId"
domainNames=("domainName1"..."domainNameN")
serverUrl="serverUrl"
[bindAccount="username" bindPassword="password"]
searchBaseDN="distinguishedName"
usernameAttribute="attributeName"
groupAttributes=("attrName1"..."attrNameN")
[skipConfigurationTest={true | false}]
Parameters
| Parameter | Description | ||||
|---|---|---|---|---|---|
|
Allows you to specify a unique ID for this domain. If not specified, a unique GUID will be generated. |
||||
|
Allows you to specify one or more valid domain names for the directory server. If you enter more than one name, separate the values with a space. |
||||
|
Allows you to specify the URL to access the LDAP server in the form of ldap[s]://hostAddress:port. If the LDAPS protocol is used, ensure that the root/intermediate certificate(s) to validate the directory server’s signed certificate is imported using the certificate commands. |
||||
|
Allows you to specify the username or bind ID to be used as the binding account. |
||||
|
Allows you to specify the password to be used as the binding password. |
||||
|
Allows you to specify the search base Distinguished Name to search for LDAP user objects for determining group membership. |
||||
|
Allows you to specify the attribute to be used to search for user objects for determining group membership. If specified, the string must contain the variable |
||||
|
Allows you to set one or more group attributes to be used to look for group Distinguished Names. Distinguished names are used to determine group membership for role mapping.
|
||||
|
Allows you to skip the configuration test before the configuration is saved. The default is |
Examples
SMcli -n Array1 -c "create storageArray directoryServer
domainNames=("company.com") serverUrl="ldap://hqldap.company.com:389"
bindAccount="dummyBindDN" bindPassword="dummyPassword"
searchBaseDN="OU=_Users,DC=hq, DC=company,DC=com"
usernameAttributes="sAMAccountName={uid}" groupAttributes="memberOf";"
SMcli completed successfully.
