Configure Active Directory

Do the following to configure Active Directory in the StorNext Unified User Interface (UUI).

  1. Access the Quantum Unified User Interface (UUI).

  2. Do one of the following:

    1. (Option 1) Click UI Settings/Help (the Kebab icon), and then click Users.

    2. (Option 2) Click System Settings (the Cogwheel icon).

  3. For Option 1, click Configure Active Directory; for Option 2, click Active Directory. The Configure Active Directory dialog appears.

  4. Enter the following fields:

    Tab Field Description Usage
    Basic Active Directory State Toggles Active Directory integration on or off. Enable to activate the AD connection. Disable to turn off AD-based authentication and lookups.
    Server The hostname or IP address of the AD domain controller. Enter the FQDN (fully qualified domain name) of your domain controller. This value is used to establish the directory connection.
    User Name The username used to authenticate against the directory. This should be a user account with permission to query users and groups. The format can be just the username or include the domain (for example, domain\user or user@domain).
    Password Password for the directory user specified in the User Name field. This credential is used to perform bind operations to the directory. The password input is masked for security.
    Advanced Connection URL The LDAP server address and port.

    Use ldap:// for unencrypted or ldaps:// for SSL-encrypted communication. Default port for LDAPS is 636.

    Example

    ldaps://dc1.sps.lab:636

    Bind DN The user name (in UPN or DN format) used to bind to the LDAP directory.

    This account must have read access to search for user entries.

    Example

    administrator@sps.lab

    TLS Enables Transport Layer Security (TLS) for encrypted LDAP communication. Should be enabled when using ldaps:// to ensure secure transmission.
    Users Base DN The base location in the LDAP directory from which user searches will begin.

    Specify the appropriate container or organizational unit (OU) based on your directory structure.

    Example

    CN=Users,DC=sps,DC=lab

    UUID LDAP Attribute The LDAP attribute used to uniquely identify each user.

    Common attributes include objectGUID for Windows domains or uid for Unix-based systems.

    Example

    objectGUID

    User Object Classes Specifies which LDAP object classes are considered user accounts.

    Used to filter LDAP search results to only include valid user objects.

    Example

    person, organizationalPerson, user

    Search Scope Options:
    • One Level: Only immediate children of the base DN are searched.
    • Subtree: Searches the entire subtree under the base DN.

    Choose the scope depending on how deeply users are nested in your directory.

    Example

    One Level

  5. Click Update to save and apply the current configuration (disabled until required fields are completed), or click Cancel to discard the changes and return to the previous screen. You can also click Delete Config to remove the current AD configuration.