topic Re: OneView Driectory Login in HPE OneView

OneView Driectory Login

Tinux — Fri, 13 Dec 2024 03:00:31 GMT

I have configured OneView to use Active Directory LDAP login.

OneView does not accept other than DC=<company>, DC=<suffix> in Base DN while the users accounts are created in OU=Users,OU=<org>,DC=<company>, DC=<suffix>

Is this why one always has to login with <username>@<company>.<suffix> and not just with: <username> ?

Regards

Re: OneView Driectory Login

ChrisLynch — Thu, 12 Dec 2024 18:23:33 GMT

Back in the older OneView releases, we required the full Distiguished Name of the OU where the groups would be located. OneView's LDAP client binds to the directory Base DN, and performs directory searches from that starting point. The username format is documented here.

Re: OneView Driectory Login

Tinux — Fri, 13 Dec 2024 10:18:12 GMT

Hi Chris,

I figured it out, maybe this could be an addendum to the documentation ?

As example I'll use: ACME.CORP as the Active Directory

At first I used ACME.CORP as Directory name
Base DN: DC=ACME,DC=CORP

But according to the documentation:

quote:
"A best practice is to set the HPE OneView display name for the directory service to match the leading part of the fully qualified domain name"

So I create a new directory with just ACME as Directory name.
That still didn't work

What worked was to use is the Domain Name set as 'pre-Windows 2000' from the Active Directory properties, which in my my case was: ACMECORP
So I create a new directory with ACMECORP as Directory name and now I can login with just my username.

I think the documentation should also note that the value of 'Domain name (pre-Windows 2000)' should be used a Directory name when this is configured different than the leading part of the FQDN.

Regards,
Martijn

Re: OneView Driectory Login

Sunitha_Mod — Thu, 19 Dec 2024 06:16:16 GMT

Hello @Tinux,

That's Perfect!

We are glad to know you were able to find the solution and thank you for keeping us updated.