Edit on GitHub Download PDF

Cloud Native Qumulo on AWS Administrator Guide
- Documentation Home
- Guide Table of Contents
- Contacting the Qumulo Care Team
Getting Started
- How Cloud Native Qumulo Works
- Deploying with CloudFormation
- Deploying with Terraform
- Supported Configurations and Known Limits
System Upgrades
- Feature Log
- Performing Upgrades
- Replication Version Requirements and Upgrade Recommendations
Authentication
- Installing a Signed SSL Certificate
- Configuring Active Directory
- Configuring LDAP
- Configuring SAML Single Sign-On (SSO)
- Configuring Search Trusted Domains
- Creating and Using Bearer Tokens
Connecting to External Services
- Creating and Using Access Tokens
- Connecting a Kubernetes Cluster
Authorization
- Managing Role-Based Access Control (RBAC)
- Managing Cross-Protocol Permissions
- Using SMB Host Restrictions
- Using Active Directory for POSIX Attributes
- Managing File Locks
Encryption at Rest
- Managing Encryption at Rest
Encryption in Transit
- Managing SMB3 Encryption in Transit
- How NFSv4.1 Works with Kerberos
- Host Access Rules for NFS Exports
Cryptographic Key Management
- Generating and Storing ECDSA Keys
- Managing Security Keys
Storage Management
- Creating and Managing Directory Quotas
Network Configuration
- Required Networking Ports
- Configuring IPv6
- Connecting to Multiple Virtual Networks
- Configuring Round-Robin DNS on Windows Server
- Configuring Qumulo Authoritative DNS (QDNS)
Cloud Data Fabric
- Enabling Cloud Data Fabric
- Known Limits for Cloud Data Fabric
- Configuring a Portal Relationship
- Configuring Cache Management
Web UI
- Setting the Web UI Login Banner
- Setting the Web UI Inactivity Timeout
qq CLI
- Getting Started with the qq CLI
- Enabling Autocomplete for the qq CLI
Metadata
- Managing User-Defined Metadata
Snapshots
- How Snapshots Work
- Managing Snapshots
- Locking and Unlocking Snapshots
- Recovering Files by Using Snapshots
Data Replication
- Creating and Managing a Continuous Replication Relationship
- Shift-To Amazon S3
- Shift-From Amazon S3
File System Changes
- How File System Change Notifications Work
- Watching for Changes with SMB2 CHANGE_NOTIFY
- Watching for Changes with REST
NFS
- Creating and Managing an NFS Export
- Enabling and Using NFSv4.1
- Managing File Access Permissions with ACLs
- Host Access Rules for NFS Exports
NFSv4.1 with Kerberos
- How NFSv4.1 Works with Kerberos
- Prerequisites for Joining to Active Directory
- Configuring Active Directory
- Performing Additional Cluster Configuration
- Using Kerberos Permissions
- Configuring a Linux Client
- Configuring Cross-Domain Active Directory Trusts
- Troubleshooting NFSv4.1 with Kerberos
SMB
- Creating and Managing an SMB Share
- Managing File Shares by Using the Shared Folders MMC Snap-In
S3 API
- Configuring and Using the S3 API
- Creating and Managing S3 Access Keys
- Creating and Managing S3 Buckets
- Managing Access to S3 Buckets
- Managing Access Policies for S3 Buckets
- Managing Multipart S3 Uploads
- Managing S3 Bucket Versioning
- Managing Object Lock
- Supported Functionality and Limits
Monitoring and Metrics
- Enabling Nexus Remote Support
- Enabling Cloud-Based Monitoring
- Connecting to Cloud-Based Monitoring and S3 with a Custom Proxy
- Restoring the Default Values for Cloud-Based and Nexus Monitoring
- How Audit Logging Works
- OpenMetrics API Specification

Configuring LDAP on your Qumulo Cluster

This section explains how to configure LDAP on Qumulo Core 2.12.1 (and higher).

To Configure LDAP by Using the Qumulo Core Web UI

Log in to the Qumulo Core Web UI..
Click Cluster > LDAP.
On the LDAP Configuration page, click Edit and then do the following:
1. For Use LDAP features, click Yes.
2. For LDAP URIs, enter a comma-separated list of up to 3 server URIs. The cluster will use the first server in the list, falling back to the remaining servers if the former becomes unreachable.
3. For Base DN, enter the Distinguished Name (DN) from which the LDAP server searches for users.
4. For Bind Username, enter the username for logging in to LDAP services.
  
  Note
  This username must have the permission to search within the provided DN.
5. For Bind Password, enter the password that corresponds to the username.
6. (Optional) For Encrypt Connection, click Yes.
  Important
  - By default, Qumulo requires an encrypted connection to connect to LDAP (either LDAPS or StartTLS). If you disable the option to connect without TLS, you might expose credentials over your network.
  - To use encrypted connections, you must install a valid certificate for your LDAP server.
7. Click Save.