LDAP & DSS NAS Integration
The following questions relate to using LDAP with the NAS function of DSS. I have also asked Support, who suggest using V1.23 (we are using V1.32), but have not yet answered the other questions, but our customer needs to know now. Can I please ask anyone who has experience with using LDAP with DSS/NAS?
(A) Please can you clarify the meaning of the following statement from the DSS User Guide...
Users should be stored in Organization Unit (ou) "People", groups in "Groups", and computers in "Computers".
does this mean that if the user's existing LDAP directory does not look like above (which would appear to be rather unlikely), then DSS will not be able to access user accounts? Our educational customer has a large LDAP directory structure with about 30,000 (30.000) objects in it, as follows...
PolytechName
Campus 1
Staff
<user accounts>
Students
<user accounts>
Campus 2
Staff
<user accounts>
Students
<user accounts>
Campus 3 etc.
Can you please tell us how to make this work?
(B) We need to provide access to both Staff & Students at 1 Campus (at the moment, and maybe > 1 Campus later).
Does it search for users down the directory tree starting at the Base DN? or just look at one container? (hopefully not!)
(C) We understand that Netware eDirectory is not natively supported, but as it is LDAP-based, we think it should work.
The standard container "types" used in all Novell directories are "Organisation" ("o") and "Organisation Unit" ("ou"), so this gives us the following settings....
Base DN: ou=Campus1,o=PolytechName
admin DN: cn=admin,ou=Campus1,o=PolytechName
Should we be using "ou=Campus1" or "dc=Campus1" instead?
But using these causes DSS to run VERY slowly, and all responses to the web interface are very very slow. Maybe this is the post V1.23 issue.
Thanks for any help you can provide us.
