Migrating Users to LDAP

When you upgrade the Fabric Manager, the OpenLDAP is configured and default users and groups are created automatically.

The following table displays the users that are created by default and the group to which each user belongs:

User name

Group Name

administrator

Administrator

forwardadmin

FieldEngineer

operator

Operator

observer

Observer

This process migrates the existing users to OpenLDAP and creates new passwords for these user names. To view the list of users in the LDAP database,

  1. Log in to the FMP and open a new terminal session or if you are connecting remotely, use a tool like PuTTY or the remote desktop function of the Fabric Management Platform and execute the following command:

    ldapsearch -D "cn=root,dc=unisys,dc=com" -b "ou=users,dc=unisys,dc=com" -W
  2. Type the password. The default password is ‘LDAPAdmin@1’.

    The list of all the users in LDAP database is displayed.

Notes:

  • During the first login, the Fabric Manager prompts the users to reset the password.

  • After migrating to OpenLDAP, the user names do not contain the domain name. For example, the user name ‘customer@unisys.com’ changes to ‘customer’.

  • The new default password is the user name with the first character in uppercase, all other characters in lowercase, followed by the characters “@1”. For example, for the user name ‘customer’, the default password is ‘Customer@1’.

  • The length of the default password is limited to 20 characters, inclusive of @1. So, only the first 18 characters of the user name are considered for the password and the rest are truncated.

  • After migrating to OpenLDAP, the roles previously assigned to the users are preserved only if they are default roles.