AD authentication method in bigfix

Usage and Config Platform
1

Hi all,
If we want to configure users to authenticate with AD, what AD level user permission we want ? Do we require AD admin privileges?

Dilu

2

Hi,

Here is BF AD LDAP guide: https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Console%20LDAP%20Guide

Which of the bullets do you exactly refer to?

3

Thank you Lukasz for your reply.
I have a doubt on the second point — "Add an LDAP Directory in the TEM console and point it to an AD domain controller. Set up a special account with a non-expiring password just for authentication "

What privilege does the AD account should have to add an LDAP directory. Whether it should an AD admin or it can be any normal user?

4

Hi,

This is a user just for the purpose of connecting to LDAP in order to query it. If it works in Add LDAP Directory dialog after clicking Test, it is OK. Definitely it doesn’t need to be LDAP admin account.

1 Like
5

Thank you Lukasz !!!

6

You also don’t need an account at all if your BigFix server is joined to the same domain:

In this case it will use the computer’s AD account to authenticate users.

2 Likes