Updating LDAP bind password in DX NetOps Portal using SsoConfig

Products

• Network Observability

Issue/Introduction

You need to update the LDAP bind password within the DX NetOps Portal environment

 

 

 

Environment

• OS: RHEL 8.10

• Software: DX NetOps Portal Any Version

   

Resolution

PREREQUISITES:

• Access to the DX NetOps Portal server terminal.

• Administrative permissions to run the SsoConfig utility.

   

STEPS:

1. UPDATE PASSWORD IN SSOCONFIG:

   Execute the SsoConfig applet on the Portal server and navigate to the LDAP configuration section to update the bind password.

   Path: Install root - ./SsoConfig

    

2. NAVIGATE TO LDAP CONFIGURATION: Run the SsoConfig applet and select the following options:

   Selection 1: SSO Configuration > DX NetOps Selection

   2: DX NetOps > LDAP Authentication

   Be sure to update Remote Value (option 1) when making changes. 

3. REVIEW PARAMETERS: The following configuration fields are available within the LDAP Authentication menu:

   • Connection User: [Domain][User]

   • Connection Password: ***

   • Search Domain: ldaps://[LDAP_Server_URL]:636/OU=Users,OU=Accounts,DC=[Domain],DC=net

   • Search String: (sAMAccountName={0})

   • Search Scope: Subtree

   • User Bind: Disabled

   • Account User: {sAMAccountName}

   • Account User Default Clone: admin

   • Status: Enabled

   • Timeout: 1000

     Select the "Connection Password". Set accordingly.

     EXPECTED: The password is saved within the utility.

4. VERIFY CONFIGURATION: Exit the SsoConfig utility.

   EXPECTED: The password is properly set and active immediately upon quitting the utility

    

5. SERVICE RESTART:

    

   Commands:

   systemctl stop caperfcenter_console

   systemctl stop caperfcenter_sso

    

VERIFY SUCCESS:

• Attempt to log in to the DX NetOps Portal using LDAP credentials.

   

   

Additional Information

• PREVENTION: Ensure bind passwords are updated in SsoConfig before the existing credentials expire in the LDAP directory to maintain uninterrupted access.