Add LDAP to Dell OpenManage Enterprise Application

Hello,

 

To troubleshoot and resolve the issue where LDAP group import fails in Dell OpenManage Enterprise (OME) 4.4.0, even though the LDAP bind test is successful, follow these steps based on Dell’s official guidance and known best practices:

 

Checklist for Successful LDAP Group Import in OME

 

1. Ensure LDAPS (Port 636) Is Used

• OME only supports LDAPS, not plain LDAP.
• Confirm your Active Directory server has a valid SSL certificate installed (via AD Certificate Services).
• Test with:

openssl s_client -connect <AD-server>:636

 

 

2. Correct Bind Account Format

• Use a fully qualified DN or UPN format:
• Example DN: CN=OME Bind,CN=Users,DC=example,DC=com
• Example UPN: binduser@example.com

 

 

3. Set the Correct User Attribute

• Go to Application Settings > Console and Plugins > Directory Services
• Set:
• User Login Attribute: sAMAccountName
• Group Membership Attribute: Leave blank for standard AD

 

 

4. Manually Specify a Domain Controller

• If auto-discovery fails, switch to Manual mode and enter the FQDN or IP of a known domain controller.

 

 

5. Importing Directory Groups

• Navigate to Application Settings > Users > Import Directory Group
• If the list is empty:
• Try searching by partial group name
• Ensure the group is a security group, not a distribution group
• Ensure the group is within the search base DN defined in the LDAP settings

 

Official Dell Documentation

• Dell OpenManage Enterprise 4.4.x User Guide – Add or Edit LDAP Connection
  Add or Edit LDAP Connection
  page 59-60
  https://dl.dell.com/content/manual22819492-openmanage-enterprise-4-4-x-user-s-guide.pdf?language=en-us