vSZ 5.1.x Administrators - Active Directory

[james_mcmillan_]

Hi

I have a vSZ (v5.1.2.0.302), and am trying to configure an AAA server for SmartZone Administrators.  The manual doesn't seem to be giving me what I need - or at least, I'm not seeing the wood for the trees.  I also have a couple of questions to follow..

I've configured an AAA AD server: Administrators -> Admins & Roles -> AAA:

Name: domain.local
Type: Active Directory
Realm: domain.local
Default Role Mapping: Off
IP address: 1.2.3.4
Port: 389
Windows Domain Name: dc=domain,dc=local

Test AAA is a success, but:

1. How do I actually add AD users or groups to 'Administrators'?
2. How can I add a second Domain Controller?
3. Port 389 is essentially LDAP in plain text - if I choose port 636 (LDAPS) - it fails.  How do I secure comms to the Domain Controller?

New to the World of SmartZones, so forgive me for the basics..

Cheers, James

[kem]

Somebody possibly just wrote it longer but expanded it wrong. That was a big source of confusion for us when we tried to set it up initially so can you please forward this correction to the right place?
1.2. Search Filter has this explanation: "example: (objectClass=Person, show more...)" but what is this "show more" at the end? It isn't a link to a resource that would show more examples.

2. And the LDAPS problem: just didn't work and was confirmed not working, it is a Feature request instead.

3. Support for more characters in AD-related fields than just English. We are not an English-speaking country and we naturally use other characters too in OU and group names in AD.

[kem]

I just can't post normally, what's wrong? I try different ways and formatting and editing, then finally something works but there is error message "Failed to update comment, please try again."

So I add the crucial 4th point about the LDAPS as a photo of the text that I wanted to add.

The links in the above text are:

https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html?_ga=2.99324574.1...

https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filter...