Configuring Active Directory

NxTop Center can be linked to an Active Directory database of users and groups. The user and group (OU) definitions are imported into NxTop Center - an initial data feed and then periodic updates to keep NxTop Center synchronized. This provides your organization consistency and security, and saves time and effort by only maintaining one set of user accounts.

To integrate with Active Directory, you need to:

1. Configure NxTop Center's Active Directory values
2. Import users and group definitions from your Active Directory

These steps describe how to configure NxTop for your Active Directory. Use the same steps if you are linking NxTop Center to Active Directory for the first time or if you are changing your current configuration.

Steps

1. Log into NxTop Center using a browser, and select Overview> NxTop Center > Configuration in the navigation panel.
2. Click on the Active Directory tab. The Active Directory panel appears.
3. Click the Modify to be able to change data. The fields change from display text to text boxes:
   
4. Complete the Active Directory panel. Fill in the fields described below.
   Note: If you are updating an existing configuration, you only need to updated fields with changed data.
   • Enter the Domain server IP Address
   • Enter the Domain server port.
     • If not using SSL, default port = 389
     • If using SSL, default port = 636
   • If using SSL, fill the Use SSL checkbox.
   • Enter the Domain Root distinguished name (DN) elements (for example DC=companyname, DC=com)
   • Enter the Principal User distinguished name (DN) (the user with authority to create and modify computer objects in Active Directory).
   • Enter and verify the Password for the Principal User.
   • Enter the Operator Base DN (the location of accounts with authorization to import users and groups from the Active Directory).
   • Enter the User Base DN (the source of users to be imported).
   • Enter the Group Base DN (the source of groups to be imported).
   • Enter the Computer Base DN (the location where computer objects are stored).
5. If your organization uses more than the basic AD configuration, fill the Advanced Settings checkbox and enter any of the values needed. Check with your AD administrator for more information.
   

   

   • Enter the DNS Short name.
   • Enter the Computer Object Category.
   • Enter the User Name Attribute.
   • Enter the Group Name attribute
   • If you require SSL Certificate validation with the Active Directory server, fill the Validate Certificate checkbox.

     Note: If you fill this checkbox, you need to add the AD’s SSL certificate to the Java Key Store. More Detail

     If you need to add the Active Directory’s SSL certificate to the Java Key Store, use the following command in a Windows command window:

     keytool -import -alias domain -file "AD_SSL_cert.crt" -keystore “C:/Program Files (x86)/Java/ jdk1.6.0_13/jre/lib/security/cacerts”

     where:
     - domain is the domain where the Java Key store resides
     - AD_SSL_cert.crt is the certificate file, usually named <dns name of ca>_<name of cert>.crt

      

6. When you have entered all the fields to be completed or updated, click Save .
7. Click the Test Active Directory action. NxTop Center checks that the connection to AD is valid.
   
   It displays either a confirmation message or messages describing any problems. Click the OK button to close the pop-up.

Once the AD connection is validated, NxTop Center is prepared to use the existing Active Directory information. If you are making an initial connection to Active Directory, the next step is to Import AD users and groups into NxTop Center.