Integrating N-central with LDAP

Transcription

1

2 Contents About this Guide 3 About LDAP 3 Requirements Checklist 4 Configuring N-central to Communicate with Active Directory Servers 5

3 About this Guide This guide is intended for a technical audience that is familiar with N-central and Active Directory, and that has at least passing familiarity with LDAP (Lightweight Directory Access Protocol). This guide covers the following: Configuring N-central to poll an Active Directory server Creating N-central user accounts from Active Directory user accounts This guide is current as of October 18, About LDAP LDAP is a TCP-based protocol for querying and modifying directory services. LDAP is the protocol on which many domain management tools, such as Microsoft's Active Directory are based. N-central integrates with LDAP-compatible servers by querying them for users and creating corresponding N-central accounts for those users. There are two benefits to integrating N-central with LDAP servers: 1. Active Directory/LDAP users can sign in to N-central using their domain credentials (for example, "ABC\jsmith" instead of "jsmith@abc.com"). Warning! The format of the credentials used by Active Directory/LDAP users to sign in to N-central must be in the form of DOMAIN\username. For example, ABC\jsmith. No other format will be accepted. 2. Users with disabled Active Directory/LDAP accounts will be unable to login to N-central

4 Requirements Checklist Item Details Status N-central 8.2 HF1 Your N-central server must be running at a minimum N-central 8.2 Hotfix 1 Ports Unencrypted LDAP: 389 By default, this is the only port that must be routable from your N-central server to the LDAP/Active Directory server LDAP over SSL: 636 This port only needs to be made accessible if you have explicitly configured your LDAP/Active Directory server to communicate over SSL

5 Configuring N-central to Communicate with Active Directory Servers N-central can be configured to communicate with multiple Active Directory servers. For example, N-central can communicate with an Active Directory server at the System or Service Organization level (thereby allowing your technicians to access N-central), as well as Active Directory servers at the Customer level (so that your customers can sign in to N-centrall). Please perform the procedures described below at either the System, Service Organization, or Customer level. To add an Active Directory server to N-central 1. In the navigation pane, click Administration > LDAP Servers. 2. In the LDAP Servers screen, click Add. 3. From the Add drop-down menu, select Microsoft Active Directory. 4. Type the descriptive Name of the Active Directory server. 5. Type the name of the Domain in which the server is located. 6. In the Server 1 Host field, type the IP address or FQDN of the Active Directory server. 7. In the Server 2 Host field, type the IP address or FQDN of the fallback server (if one is configured). 8. Select the Primary Server as either Server 1 or Server 2 (if there is a primary and fallback server configured). If there is no fallback server, only one of the Host fields must be configured but the Primary Server must be selected as the one that has an IP address or FQDN. 9. By default, the Port number is configured as 389. Do not modify this value unless you are communicating with your Active Directory server over SSL in which case, you should type If you would like to connect to the LDAP server using a secure sockets layer, select SSL Enabled. If you select this option, you must change the port to 636 in the Port field. 11. In the Base DN field, type the Distinguished Name of the OU or CN where the Active Directory users exist. Example: cn=users,dc=test,dc=com - 5 -

6 12. In the Search Filter field, type the search criteria that you would like to apply when querying the server for Active Directory users. Example: (&(objectclass=user)(displayname=smith)) For more information, refer to or If you would like N-central to connect to the LDAP server anonymously, select Anonymous Bind. By default, Active Directory servers do not allow anonymous access. Only select this option if you have enabled Anonymous access on your Active Directory server. 14. If you did not select to connect anonymously, type the name of the Domain Administrator Account that N-central will use to sign in to the Active Directory server. Example: domain\username 15. Type the Password for the Domain Administrator Account. 16. Click Test Connection to confirm that N-central can successfully communicate with the Active Directory server. 17. Click Save. To edit an Active Directory server in N-central 1. In the navigation pane, click Administration > LDAP Servers. 2. Click the Name of the server that you would like to edit. 3. Update the fields as required. 4. Click Save. To remove an Active Directory server from N-central 1. In the navigation pane, click Administration > LDAP Servers. 2. Select the check box next to the server that you would like to delete. 3. Click Delete. If LDAP user accounts have been imported into N-central, a list of the accounts will be displayed when you are prompted to confirm the deletion. Deleting an LDAP server in N-central also deletes the accounts that were imported from that server. 4. Click Delete to confirm the deletion

7 If any of the imported accounts can not be deleted for any reason (for example, if they are the only configured recipient of a Notification), you will not be able to delete the server from N-central There are two methods for creating N-central user accounts for Active Directory users. Both methods work equally well and selecting the one to use is simply a matter of convenience. Option A: Import LDAP accounts into N-central from the LDAP Servers screen. 1. In the navigation pane, click Administration > LDAP Servers. 2. Click the Name of the server from which you would like to import LDAP accounts. 3. Click the Accounts tab. 4. Select the check box next to the accounts that you would like to import. Tip: You can select the check box next to the First Name column heading to select all of the accounts. 5. For each account to be imported, you must select the appropriate Customer/SO Name and Account Type. 6. Click Import Now. Option B: Import LDAP accounts into N-central from the User Accounts screen. The following procedure can only be performed at the Service Organization or Customer level. Select the appropriate Service Organization or Customer in the View Selection Menu to continue. 1. In the navigation pane, click Administration > User Accounts. 2. Click Add. 3. From the Add drop-down menu, select Import LDAP Account. 4. From the Server Name drop-down menu, select the LDAP server from which you would like to import LDAP accounts. 5. Select the check box next to the accounts that you would like to import. Tip: You can select the check box next to the First Name column heading to select all of the accounts. 6. For each account to be imported, you must select the appropriate Account Type. 7. Click Import Now

8 Congratulations! You have now successfully configured N-central to poll your Active Directory server for user accounts

9 Disclaimer This document may include planned release dates for service packs and version upgrades. These dates are based on our current development plans and on our best estimates of the research and development time required to build, test, and implement each of the documented features. This document does not represent any firm commitments by N-able Technologies Inc. to features and/or dates. N-able Technologies will at its best effort, try to meet the specified schedule and will update this document should there be any significant changes. N-able Technologies reserves the right to change the release schedule and the content of any of the planned updates or enhancements without notice. Publication or dissemination of this document alone is not intended to create and does not constitute a business relationship between N-able Technologies and the recipient. Feedback N-able Technologies is a market driven organization that places importance on customer, partner and alliance feedback. All feedback is welcome at the following address: feedback@n-able.com. About N-able Technologies N-able Technologies is the global leader in remote monitoring and management software for managed service providers and IT departments. N-able s award-winning N-central platform and complementary toolsets, backed by best-in-class business and technical services, are proven to reduce IT support costs, improve network performance and increase productivity through the proactive monitoring, management and optimization of IP-enabled devices and IT infrastructure. N-able is 100% channel-friendly and maintains operations in North America, the U.K., the Netherlands and Australia. Copyright 2012 N-able Technologies All rights reserved. This document contains information intended for the exclusive use of N-able Technologies' personnel, partners, and potential partners. The information herein is restricted in use and is strictly confidential and subject to change without notice. No part of this document may be altered, reproduced, or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of N-able Technologies. Copyright protection includes, but is not limited to, program code, program documentation, and material generated from the software product displayed on the screen, such as graphics, icons, screen displays, screen layouts, and buttons. N-able Technologies, N-central, and Report Manager are trademarks or registered trademarks of N-able Technologies International Inc., licensed for use by N-able Technologies, Inc. All other names and trademarks are the property of their respective holders.