12.2 Configuring NNMi to access a directory service

You can configure directory service access in one of the following files:

• nms-auth-config.xml file

  Caution

  We recommends that the nms-auth-config.xml file be used for LDAP configuration.

  The file is located at:

  • Windows: %NnmDataDir%nmsas\NNM\conf
  • Linux: $NnmDataDir/nmsas/NNM/conf

  By default, the nms-auth-config.xml file available in this location does not contain the XML elements required for LDAP configuration.

  You can manually add all the necessary XML elements to this file by following the instructions in this section.

  NNMi places a sample nms-auth-config.xml file in a different location, which can be used for reference.

  The sample nms-auth-config.xml file is available in the following location:

  • Windows: %NnmInstallDir%newconfig\HPOvNnmAS\nmsas\conf
  • Linux: $NnmInstallDir/newconfig/HPOvNnmAS/nmsas/conf

  Tip

  You can also copy the entire <ldapLogin> element from the sample nms-auth-config.xml file,and then make necessary modifications.

• ldap.properties file

  Caution

  We recommends that the nms-auth-config.xml file be used for LDAP configuration.

  The file is located at:

  • Windows: %NNM_SHARED_CONF%\ldap.properties
  • Linux: $NNM_SHARED_CONF/ldap.properties

Caution

You cannot use both the nms-auth-config.xml and ldap.properties files at the same time.

For details about these files, see 12.7 LDAP configuration file reference.

For details about the general structure of a directory service, see 12.4 Directory service queries.

To configure access for the mixed mode, complete the following tasks:

• 12.2.1 Task 1: Back up the current NNMi user information

• 12.2.2 Task 2: (Optional) Configure secure communications to the directory service

• 12.2.3 Task 3: Configure user access from the directory service

• 12.2.4 Task 4: Test the user name and password configuration

• 12.2.9 Task 9: Clean up to prevent unexpected access to NNMi

• 12.2.10 Task 10: (Optional) Map the user groups to security groups

To configure access for the external mode, complete the following tasks:

• 12.2.1 Task 1: Back up the current NNMi user information

• 12.2.2 Task 2: (Optional) Configure secure communications to the directory service

• 12.2.3 Task 3: Configure user access from the directory service

• 12.2.4 Task 4: Test the user name and password configuration

• 12.2.5 Task 5: (Configuring for the external mode only) Configure group retrieval from the directory service

  Note

  If you plan to store NNMi user groups in the directory service, the directory service must be configured with the NNMi user groups. For details, see 12.5 Directory service configuration for storing NNMi user groups.

• 12.2.6 Task 6: (Configuring for the external mode only) Map the directory service groups to NNMi user groups

• 12.2.7 Task 7: (Configuring for the external mode only) Test the NNMi user group configuration

• 12.2.8 Task 8: (Configuring for the external mode only) Configure NNMi user groups for incident assignment

• 12.2.9 Task 9: Clean up to prevent unexpected access to NNMi

• 12.2.10 Task 10: (Optional) Map the user groups to security groups

Organization of this section

• 12.2.1 Task 1: Back up the current NNMi user information

• 12.2.2 Task 2: (Optional) Configure secure communications to the directory service

• 12.2.3 Task 3: Configure user access from the directory service

• 12.2.4 Task 4: Test the user name and password configuration

• 12.2.5 Task 5: (Configuring for the external mode only) Configure group retrieval from the directory service

• 12.2.6 Task 6: (Configuring for the external mode only) Map the directory service groups to NNMi user groups

• 12.2.7 Task 7: (Configuring for the external mode only) Test the NNMi user group configuration

• 12.2.8 Task 8: (Configuring for the external mode only) Configure NNMi user groups for incident assignment

• 12.2.9 Task 9: Clean up to prevent unexpected access to NNMi

• 12.2.10 Task 10: (Optional) Map the user groups to security groups

To Page Top