Preparing Windows AD Domain Configuration Data

Before adding a storage system to an AD domain, collect configuration data of a Windows AD domain server. The section uses Windows Server 2008 R2 as an example. The operation procedure is as follows:

1. Log in to the Windows AD domain server. Choose Start > Administrative Tools > Active Directory Users and Computers. In the Active Directory Users and Computers window, view and record related parameters.
2. Obtain the Base DN information. As shown in the figure, icp.com maps to Base DN on the configuration page of the storage system, that is, dc=icp,dc=com.

3. Obtain the Bind DN information.
   1. On the menu bar of the Active Directory Users and Computers software, click View, and select Advanced Features to display advanced features of the AD domain server.

   2. Select the Users folder under icp.com.

   3. The Administrator is used as an example. Right-click Users and choose Properties.

   4. In the Administrator Properties dialog box, click Attribute Editor, select distinguishedName, and click View to obtain the Bind DN information. The queried Bind DN record is cn=Administrator,cn=Users,dc=icp,dc=com.

      The Attribute Editor option is available only after you select the Advanced Features in Step 3.1.

4. Obtain the User Directory information. (This information is required when you create an LDAP user.)
   1. Administrator under Users is used as an example. Right-click the Users folder under icp.com, and choose Properties.

   2. In the Users Properties dialog box, click Attribute Editor, select the distinguishedName property, and click View to obtain the User Directory information. The queried User Directory record is cn=Users,dc=icp,dc=com.

5. Obtain the Group Directory information. (This information is required when you create an LDAP user group.)
   1. The Domain Admins user group under Users is used as an example. Right-click the Domain Admins user group and choose Properties.

   2. In the Domain Admins Properties dialog box, click Attribute Editor, select the distinguishedName property, and click View to obtain the Group Directory information. The queried Group Directory record is cn=Domain Admins,cn=Users,dc=icp,dc=com.

6. Contact the Windows AD domain server administrator to obtain IP Address and Bind Password of the AD domain server.

   For details about how to create AD domain users and groups on the AD domain controller, see How Can I Create AD Domain Users and Groups on the AD Domain Controller?