112 Implementing the IBM Storwize V7000 with IBM Spectrum Virtualize V8.2.1
Figure 4-27   Configure remote authentication: Advanced LDAP settings
– User Attribute
This LDAP attribute is used to determine the user name of remote users. The attribute 
must exist in your LDAP schema and must be unique for each of your users.
This advanced setting defaults to sAMAaccountName for Microsoft Active Directory and to 
uid for IBM Security Directory Server and OpenLDAP.
– Group Attribute
This LDAP attribute is used to determine the user group memberships of remote users. 
The attribute must contain either the distinguished name of a group or a 
colon-separated list of group names.
This advanced setting defaults to memberOf for Microsoft Active Directory and 
OpenLDAP and to ibm-allGroups for IBM Security Directory Server. For OpenLDAP 
implementations, you might need to configure the memberOf overlay if it is not in place.
– Audit Log Attribute
This LDAP is attribute used to determine the identity of remote users. When an LDAP 
user performs an audited action, this identity is recorded in the audit log. This 
advanced setting defaults to userPrincipalName for Microsoft Active Directory and to 
uid for IBM Security Directory Server and OpenLDAP.
3. Enter the server settings for one or more LDAP servers, as shown in Figure 4-28 on 
page 113. To add servers, click the plus (+) icon. The following settings are available:
– Preferred
Authentication requests are processed by the preferred servers unless the connection 
fails or a user is not found. Requests are distributed across all preferred servers for 
load balancing. Select Preferred to set the server as a preferred server.