2V0-21.23 Question 187
Select 3A VMware administrator is tasked with integrating an organization's vCenter Server with their corporate LDAP directory. The administrator must ensure users can log in with their existing credentials and that group memberships in the corporate LDAP are also recognized in vCenter permissions. Which of the following steps are required to properly configure LDAP integration in vCenter Server?
- A
Configure the LDAP server settings, including the Base DN, Bind DN, and Bind Password in vCenter Server.
- B
Ensure the vCenter Server has a valid SSL certificate to securely communicate with the LDAP server.
- C
Manually create user accounts in vCenter Server that match the LDAP directory usernames.
- D
Create a new identity source in vCenter Server and select the 'Active Directory over LDAP' option.
- E
Verify LDAP group memberships are synchronized in vCenter Server using the 'Synchronize Now' option.
Show answer and explanation
Correct answers: A, B, D
Explanation
To integrate LDAP with vCenter Server, the administrator must configure the LDAP server settings (Base DN, Bind DN, and Bind Password) for proper authentication, ensure secure communication using a valid SSL certificate, and create a new identity source with the 'Active Directory over LDAP' option. User accounts do not need to be manually created in vCenter, as LDAP handles authentication and group memberships dynamically.
- A. Correct.
Correct: Configuring the LDAP server settings, including Base DN, Bind DN, and Bind Password, is a critical step for enabling communication between vCenter Server and the LDAP directory.
- B. Correct.
Correct: A valid SSL certificate ensures secure communication between vCenter Server and the LDAP server, which is a best practice for security.
- C. Incorrect.
Incorrect: User accounts do not need to be manually created in vCenter Server. Once LDAP is properly configured, users authenticate via the directory, and permissions are assigned based on their LDAP group memberships.
- D. Correct.
Correct: Creating a new identity source and selecting 'Active Directory over LDAP' is a necessary step to integrate LDAP with vCenter Server.
- E. Incorrect.
Incorrect: Synchronizing LDAP group memberships is not required as vCenter Server dynamically queries LDAP during login and permission checks.