Exciting new changes are coming to the Knowledge Base site soon!
Starting April 4, 2023, you will notice Support-Specific categorization and improvements to the search filters on the site. In May, we will be launching a new and enhanced Site UI and Navigation. To know more, read our Knowledge Article.

Home
Advice and Troubleshooting
Data Storage Software
ONTAP OS
How to set ONTAP to use LDAP Signing or Sealing for CIFS/NFS

How to set ONTAP to use LDAP Signing or Sealing for CIFS/NFS

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 9,657

Visibility:: Public

Votes:: 4

Category:: ontap-9

Specialty:: nas

Last Updated:

Applies to

ONTAP 9
- Common Internet File System (CIFS)
- Network File System (NFS)
- Lightweight Directory Access Protocol (LDAP)

Description

Beginning in ONTAP 9, you can configure signing and sealing to enable LDAP session security on queries to an Active Directory (AD) server.
- You must configure the CIFS server security settings on the storage virtual machine (SVM) to correspond to those on the LDAP server.
- Signing confirms the integrity of the LDAP payload data using secret key technology.
- Sealing encrypts the LDAP payload data to avoid transmitting sensitive information in clear text.
An LDAP Security Level option indicates whether the LDAP traffic needs to be signed, signed and sealed, or neither. The default is none.