Overview
Before using the Active Directory for administrator provisioning, you must configure the installed AD/LDAP Connector.
This article provides detailed instructions to configure the AD/LDAP Connector for setting up and managing connectivity between the AD/LDAP and Druva Cloud.
Before you begin
Ensure you have installed the AD/LDAP Connector. For more information, see Download and Install AD/LDAP Connector.
❗ Important
AD/LDAP Connector can establish a connection with Druva Public Cloud directly or through a proxy server.
Configure AD/LDAP Connector
On Windows
📝 Note
If administrators are using IP whitelisting, they might need to add an additional IP range to the list of whitelisted IPs. Please contact support to obtain the additional range of IPs that need to be whitelisted.
To configure the AD/LDAP Connector
On the system where you have the AD/LDAP Connector installed, click Start > ADConnector. The AD Connector window appears.
Enter the AD Connector Registration Key that you had copied from the DCP console.
📝 Note
We recommend you use a single registration key to configure a single AD Connector.
The Connector Name is auto-populated with your system name into the field. You can also manually edit the connector name.
📝 Note
The connector name is not case-sensitive. This parameter is optional, and if not provided, Druva will automatically select your system name.
Select the appropriate checkbox to connect with the Gov Cloud (FIPS) or FedRAMP. By default, the Public Cloud will be selected.
The Cloud URL will be auto-populated into the field if you select the Public Cloud.
(Optional) Select the Add Web Proxy option if your network infrastructure uses a Web proxy. Enter the appropriate information for the below fields and click Save.
Proxy Type: Proxy protocol that you are using. Druva supports http, socks4, and socks5 proxy protocols.
Proxy Server IP Address: IP address of the proxy server.
Proxy Port: The port number of the proxy server.
Proxy server requires authentication: Select this checkbox if your proxy server requires authentication to access the internet.
Username: The Username required for proxy server authentication.
Password: The Password required for proxy server authentication.
Click Register. The AD/LDAP Connector is now configured and will appear in the AD/LDAP Connectors section of the Cloud Settings Page.
📝 Note
You can verify the connection status of the installed and configured AD/LDAP Connectors on AD/LDAP Connectors page. Upon successful configuration, the Connection Status appears as Connected.
To add a new connector, go to the Three vertical dots icon > Add New Connector.
📝 Note
Do not regenerate the registration key after the AD/LDAP Connector is configured. If you regenerate the key, the existing registration key is deactivated.
On Linux (CentOS, RHEL & Ubuntu)
📝 Note
If administrators are using IP whitelisting, they might need to add an additional IP range to the list of whitelisted IPs. Please contact support to obtain the additional range of IPs that need to be whitelisted.
To configure the AD/LDAP Connector
Open the command line interface window.
Run the following command to configure the ADConnector agent:
For Public Cloud
ADConnectorAgent ad-connector activate --token <<token from above API>> -k -n "<<your device/system name>>"
For Gov/FIPS
ADConnectorAgent ad-connector activate -g --token <<token from above API>> -k -n "<<your device/system name>>"
For FedRAMP
ADConnectorAgent ad-connector activate -f --token <<token from above API>> -k -n "<<your device/system name>>"
where <<token from above API>> is the registration key that you had copied from the DCP console and <<your device/system name>> is the Connector name.
📝 Note
The connector name is not case-sensitive. This parameter is optional, and if not provided, Druva will automatically select your system name.
(Optional)To add a web proxy:
📝 Note
If your network infrastructure uses a Web proxy, you must add a Web proxy before configuration.
In the command prompt, run the following command to set the Web proxy:
ADConnectorAgent web-proxy-config --set --host <<ProxyHost_IP:port>> --user <<Proxy_user>> --pass <<Proxy_Password>> --proxy-type <<Proxy_Type>>
For Example:
ADConnectorAgent web-proxy-config --set --host "1.2.3.4:389" --user "iamuser" --pass "thisispass" --proxy-type “http”