《01_Connect the QNAP NAS to an LDAP Directory》.docx

Connect the QNAP NAS to an LDAP Directory What is LDAP? LDAP stands for Lightweight Directory Access Protocol. It is a directory that can store the information of all the users and groups in a centralized server. Using LDAP, the administrator can manage the users in the LDAP directory and allow the users to connect to multiple NAS servers with the same username and password. This application note is intended for administrator and users who have some knowledge about Linux servers, LDAP servers, and Samba. An LDAP server which is up and running is required when using the LDAP feature of the QNAP NAS. Required information/settings: The LDAP server connection and authentication information The LDAP structure, where the users and groups are stored The LDAP server security settings Follow the steps below to connect the QNAP NAS to an LDAP directory. Login the web interface of the NAS as an administrator. Go to “Access Right Management” “Domain Security”. By default, the option “No domain security” is enabled. That means only the local NAS users can connect to the NAS. Select “LDAP authentication” and complete the settings. LDAP Server Host: The host name or IP address of the LDAP server. LDAP Security: Specify how the NAS will communicate with the LDAP server: ldap:// = Use a standard LDAP connection (default port: 389). ldap:// (ldap + SSL) = Use an encrypted connection with SSL (default port: 686).This is usually used by older version of LDAP servers. ldap:// (ldap + TLS) = Use an encrypted connection with TLS (default port: 389).This is usually used by newer version of LDAP servers BASE DN: The LDAP domain. For example: dc=mydomain,dc=local Root DN: The LDAP root user. For example cn=admin, dc=mydomain,dc=local Password: The root user password. Users Base DN: The organization unit (OU) in which users are stored. For example: ou=people,dc=mydomain,dc=local Groups Base DN: The organization unit (OU) in which groups are stored. For example ou=group,dc=mydomain,dc=loc