About Omneon MediaGrid - Harmonic Inc

Editing the LDAP Configuration File
System Configuration
A configuration file is present on the ContentDirectors, which can be edited to set up LDAP
authentication. Complete the steps below to set up LDAP.
NOTE: You may also use the preferred Linux LDAP client configuration method prescribed by your Linux
system administrator to set up LDAP.
To edit the file:
1. Open the /etc/ldap.conf file on both the primary and secondary ContentDirectors and edit the
following lines:
a. Specify the LDAP server by changing “host 127.0.0.1” to the Fully Qualified Domain Name
(FQDN) of the customer LDAP server, for example:
ahost.example.com
Another way to specify the LDAP server is to provide a Uniform Resource Identifier (URI) with
the server name. For example:
uri ldap://example-ldap/
b. Change the entry “base dc=example,dc=com” to the distinguished name of the search base,
which is the name that uniquely identifies an entry in the directory.
c. Edit the line “pam_password md5” to add the password encryption function crypt.
• For Windows, edit as follows: pam_password crypt
• For Apple Open Directory, edit as follows: pam_password exop
2. Save and close the /etc/ldap.conf file.
3. Open the /omneon/config/mdscore-local file on both the primary and secondary
ContentDirectors and add the following line to the file to set the authentication method:
auth_method = pam
4. Create a symbolic link between the two LDAP configuration files as follows:
mv /etc/openldap/ldap.conf /etc/openldap/ldap.conf.old
ln -s /etc/ldap.conf /etc/openldap/ldap.conf
5. Type the following to test the configuration:
id admin
where “admin” is a user who is only in ldap and not in the local /etc/passwd file.
You should see the following if the configuration is set up properly:
uid=5001(admin) gid=5001(admin) groups=5001(admin)
If you see the following output, LDAP is not configured properly, and you must trace the problem:
id: admin: No such user
6. Restart the omcld service by typing the following:
service omcld restart
Omneon, Now Part of Harmonic 115