Automate - Configure LDAP Synchronization

Owned by Emmanuel Cunningham (Unlicensed), created
Oct 11, 2022
4 min read

The material in this document is for informational purposes only. The products it describes are subject to change without prior notice, due to the manufacturer’s continuous development program. Rampiva makes no representations or warranties with respect to this document or with respect to the products described herein. Rampiva shall not be liable for any damages, losses, costs or expenses, direct, indirect or incidental, consequential or special, arising out of, or related to the use of this material or the products described herein.

Introduction

This article describes how to configure an Active Directory authentication service in Rampiva Automate. This service can be used to allow users to authenticate to Rampiva Automate, or for synchronizing user and computer objects which are used when performing ECC collections or during Legal Holds.

Prerequisites 

  • Rampiva Automate 5.4 or later

  • Microsoft Active Directory and applicable Domain credentials

Instructions

A. Create an LDAP Authentication Service

1

From the Settings page, select Authentication Services panel.

2

Click the Add + LDAP Authentication Service button to create a new Authentication Service.

3

Enter the name for the Authentication Service, for example AD Authentication Service.

4

Enter the Domain DN, for example DC=rampiva,DC=local.

The Domain DN is the fully qualified domain name of your Active Directory environment, for example if your domain was rampiva.local then the fully qualified domain name would be DC=rampiva,DC=local. Alternatively, if you do not know the domain, from a domain computer you can run the command $env:userdnsdomain in PowerShell.

5

In the Host field enter the name of your domain controller or the name of your domain.

Alternatively, you can enter the IP Address of your domain.

6

Enter 389 for the Port. If Secure LDAP is enabled then enter 686 for the port.

7

Check Secure LDAP if your Local AD environment has LDAPS enabled.

8

Update the Port used to connect to Local AD if this option is checked.

9

In the Synchronization Settings section, check Synchronize Objects. This step will be used to enable Synchronization with the Local AD server.

If the service is only being used to authenticate users, then object synchronization does not need to be configured. However, if the service is used for ECC collections or Legal Holds, then the synchronization must be enabled.

 

10

Enter the User Base DN. For example CN=Users,DC=rampiva,DC=local.

11

Select Whole Sub Tree for the User Search Scope. The User Search Scope Options are:

  • Base - Only the User Base DN will be searched;

  • Immediate Children - Only the immediate children of the User Base DN will be searched;

  • Whole Sub Tree - User Base DN and any children of User Base DN will be searched;

  • Subordinates Sub Tree - Only children of User Base DN, not including the User Base DN will be searched.

12

Enter the Computer Base DN. For example CN=Computers,DC=rampiva,DC=local.

13

Select Whole Sub Tree for the Computer Search Scope. The Computer Search Scope Options are:

  • Base - Only the Computer Base DN will be searched;

  • Immediate Children - Only the immediate children of the Computer Base DN will be searched;

  • Whole Sub Tree - Computer Base DN and any children of Computer Base DN will be searched;

  • Subordinates Sub Tree - Only children of Computer Base DN, not including the Computer Base DN will be searched.

14

Enter 30 for the Synchronization Interval. The periodic interval in minutes that Rampiva Automate will synchronize computers and users from Active Directory.

15

Enter the Service Account Name. For example RAMPIVA\Administrator. This step will be used to set the Service Account that Automate will use to synchronize users and computers from the Local AD server.

16

Enter the Service Account Password. The Service Account Password is the password for the Service Account Name defined in the previous step.

17

Click Add Service at the bottom right of the LDAP Authentication Service tablet to add the LDAP Authentication Service.

The LDAP Authentication Service will now synchronize with Active Directory.