VPLEX: Adding more than one 'User-Search-Path' to LDAP Configuration in VPlex

           

   Article Number:     537442                                   Article Version: 2     Article Type:    Break Fix 
   

 


Product:

 

VPLEX Series,VPLEX VS2,VPLEX Local,VPLEX Metro,VPLEX Geo,VPLEX VS6

 

Issue:

 

 

   
    Unable to add more than one User-Search Path to Authentication Directory Service configuration in VPlex.   
   
   
   
   
   
   
     
                                                           

 

 

Cause:

 

 

Configuring an Authentication Directory Service allows an administrator to provide an external authentication directory service to provide a single sign-on for groups of users instead of maintaining individual local login accounts.    
   
    Pages 60-64 of the VPlex CLI Guide 601 gives the following example of configuring an authentication directory-service:   
   
    VPlexcli:/> authentication directory-service configure -d 2 -i 192.168.98.101 -b "dc=org,dc=company,dc=com" -r "ou=vplex,dc=org,dc=company,dc=com" -n "cn=Administrator,cn=Users,dc=org,dc=company,dc=com" -t 2 -s servername -p   
   
    Highlighted above is the required user-search-path argument.  Only one argument can be entered following -r.   
   
   
    User-Search-Path is the distinguished name of the node at which to begin user searches in the directory server. User-search-path is a sequence of relative distinguished names connected by commas.   
    The principal specified for a user-search-path must belong to an organizational unit class. The user-search- path must be enclosed in quotes.   
   
   
     
                                                           

 

 

Resolution:

 

 

Adding more than 'User-search-path' is unsupported in VPlex.   
   
    If possible, all users should be added under the one search path.
                                                           

 

 

Notes:

 

 

   
    For further reference refer to JIRA-17336, JIRA access is available only to authorized Customer Service Representatives.