Contents

• Overview
• LDAP and Multiple Authentication Server Configuration Using Active Directory
• Prerequisites

Overview

---

This chapter includes the following sections:

• LDAP and Multiple Authentication Server Configuration Using Active Directory
• Prerequisites

LDAP and Multiple Authentication Server Configuration Using Active Directory

Cisco UCS can be configured to authenticate user logins remotely using LDAP and various remote authentication providers, such as Active Directory (AD).

This sample configuration is intended to show you the complete process—from start to finish—of implementing Cisco UCS LDAP and multiple server authentication using an AD server. It also includes steps for testing your implementation in the Cisco UCS Manager GUI and Cisco UCS Manager CLI.

Specifically, this configuration includes the following tasks in the AD server:

• Creating an Organizational Unit and Adding Groups
• Creating a Non-Admin Bind User Account
• Creating Users and Adding Them to the CiscoUCS OU
• Collecting Information for the UCS LDAP Configuration

The following tasks are completed in Cisco UCS Manager:

• Creating a Local Authentication Domain
• Creating an LDAP Provider
• Configuring the LDAP Group Rule
• Creating an LDAP Provider Group
• Creating an LDAP Group Map
• Creating an LDAP Authentication Domain

Prerequisites

To complete this sample configuration, you must have have the following:

• Cisco UCS system
• Cisco UCS Manager, version 1.4(1) or later
• Microsoft Active Directory server 2003 or later
• Administrative privileges for the Active Directory server
• ADSI Edit