{"id":9864,"date":"2021-05-19T05:00:48","date_gmt":"2021-05-18T19:00:48","guid":{"rendered":"https:\/\/www.penguinpunk.net\/blog\/?p=9864"},"modified":"2021-05-16T18:09:51","modified_gmt":"2021-05-16T08:09:51","slug":"rubrik-basics-add-ldap","status":"publish","type":"post","link":"https:\/\/www.penguinpunk.net\/blog\/rubrik-basics-add-ldap\/","title":{"rendered":"Rubrik Basics – Add LDAP"},"content":{"rendered":"

\"\"<\/a><\/p>\n

I thought I’d run through the basics of adding LDAP support to a Rubrik Edge cluster. I’ve written previously about multi-tenancy considerations with Rubrik<\/a>, and thought it might be useful to start down that path in the lab to demonstrate some of the process. It’s not a terribly difficult task, but I did find a little trial and error was required. I suspect that’s because of some environmental issues on my side, rather than the Rubrik side of things. Anyway, let’s get started. Click on the Gear \/ Settings icon in the Web UI. Then select Users under Access Management.<\/p>\n

\"\"<\/a><\/p>\n

Click on the LDAP Servers tab and click on “Add LDAP Server”.<\/p>\n

\"\"<\/a><\/p>\n

You’ll be presented with the Add LDAP Server workflow window.<\/p>\n

\"\"<\/a><\/p>\n

I messed this up a few times in my environment, but this is what worked for me.<\/p>\n

Domain name: domainname.com.au<\/p>\n

Base DN: dc=domainname,dc=com,dc=au<\/p>\n

Bind DN or Username: dan.frith@domainname.com.au<\/p>\n

Password: *******<\/p>\n

Click Next to continue.<\/p>\n

\"\"<\/a><\/p>\n

I pointed to one of the Active Directory servers in the environment. This went better when I added the domain name search to the cluster. The port I used was 389, but I’ve seen variations on that in various articles across the Internet.<\/p>\n

\"\"<\/a><\/p>\n

If that works, you then have the option to enable MFA integration.<\/p>\n

\"\"<\/a><\/p>\n

Toggling the button will give you the option to add two-step verification. There are some articles on the Internet that provide further guidance on that, and this video<\/a> is quite useful too.<\/p>\n

\"\"<\/a><\/p>\n

Once you’ve added your directory source, it’s time to assign roles to a user.<\/p>\n

\"\"<\/a><\/p>\n

Click on Assign Roles, then drop down the directory you’d like to search in.<\/p>\n

\"\"<\/a><\/p>\n

In this example, there’s the local user directory, and the domain source that I added previously.<\/p>\n

\"\"<\/a><\/p>\n

If I search for people called Dan in this directory, it’s not too hard to find my username.<\/p>\n

\"\"<\/a><\/p>\n

I can then assign a role to my directory username. By default, the configured roles are Administrator and ReadOnlyAdmin.<\/p>\n

\"\"<\/a><\/p>\n

Now my AD account is listed under the users and I can login to CDM using my domain credentials.<\/p>\n

\"\"<\/a><\/p>\n

And that’s it. If you want to read more about Rubrik and AD integration, including some neat automation, check out this article<\/a> from Frederic Lhoest.<\/p>\n","protected":false},"excerpt":{"rendered":"

I thought I’d run through the basics of adding LDAP support to a Rubrik Edge cluster. I’ve written previously about multi-tenancy considerations with Rubrik, and thought it might be useful to start down that path in the lab to demonstrate some of the process. It’s not a terribly difficult task, but I did find a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25,972],"tags":[297,976,448,110,973],"class_list":["post-9864","post","type-post","status-publish","format-standard","hentry","category-dataprotection","category-rubrik","tag-basics","tag-data-protection","tag-death-by-screenshot","tag-howto","tag-rubrik"],"_links":{"self":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/9864","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/comments?post=9864"}],"version-history":[{"count":2,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/9864\/revisions"}],"predecessor-version":[{"id":9879,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/9864\/revisions\/9879"}],"wp:attachment":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/media?parent=9864"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/categories?post=9864"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/tags?post=9864"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}