– IP Address – Base DN – SSL Certificate The IP address of the server. The distinguished name to use as a starting point for searching for users on the server  (for example,  dc=ssd,dc=hursley,dc=ibm,dc=com ). The SSL certificate that is used to securely connect to the LDAP server. This certificate  is required only if you chose to use SSL or Transport Layer Security as a security  method earlier. Click  Finish  to save the settings. Now that remote authentication is enabled, the remote user groups must be configured. You  can use the default built-in user groups for remote authentication. However, the name of the  default user groups cannot be changed. If the LDAP server contains a group that you want to  use and you do not want to create this group on the storage system, the name of the group  must be changed on the server side to match the default name. Any user group, whether  default or self-defined, must be enabled for remote authentication before LDAP authentication  can be used for that group. Figure 4-28 Configure remote authentication: Creating an LDAP server Chapter 4. Initial configuration  113