OneView Driectory Login

[Tinux]

I have configured OneView to use Active Directory LDAP login.

OneView does not accept other than DC=<company>, DC=<suffix> in Base DN while the users accounts are created in OU=Users,OU=<org>,DC=<company>, DC=<suffix>

Is this why one always has to login with <username>@<company>.<suffix> and not just with: <username> ?

Regards

[ChrisLynch]

Back in the older OneView releases, we required the full Distiguished Name of the OU where the groups would be located.  OneView's LDAP client binds to the directory Base DN, and performs directory searches from that starting point.  The username format is documented here.

[Tinux · Accepted solution]

Hi Chris,

I figured it out, maybe this could be an addendum to the documentation ?

As example I'll use: ACME.CORP as the Active Directory

At first I used ACME.CORP as Directory name
Base DN: DC=ACME,DC=CORP

But according to the documentation:

quote: 
"A best practice is to set the HPE OneView display name for the directory service to match the leading part of the fully qualified domain name"

So I create a new directory with just ACME as Directory name.
That still didn't work

What worked was to use is the Domain Name set as 'pre-Windows 2000'  from the Active Directory properties, which in my my case was: ACMECORP
So I create a new directory with ACMECORP as Directory name and now I can login with just my username.

I think the documentation should also note that the value of 'Domain name (pre-Windows 2000)' should be used a Directory name when this is configured different than the leading part of the FQDN.

Regards,
Martijn

[Sunitha_Mod]

Hello @Tinux,

That's Perfect! 

We are glad to know you were able to find the solution and thank you for keeping us updated.