Recently I've took a Citrix netscaler class to understand and better manage the appliance. The netscaler is just a powerful device that will deliver data from one end to another in an efficient way. It could be load balancing the requests, persists the communication flow, caching, handle SSL through acceleration, apply access controls lists, you name it, almost everything can be done with this device.
Basically the class instructor drives you through the whole process of configuring the device from its basic start up to high available environments. You'll get two books one theoretical, another one for labs, they compliment each other providing you with a very well written and designed piece of information to help you during your training.
Basically, I want to talk about the labs, which are the most interesting piece of all. They are divided in two sections: the GUI and the CLI step-by-step guide. The GUI as its name implies is a tool provided by the netscaler that will help you set up the device in an easy and intuitive way. The CLI on the other side is more like the gold in the mine, like the icing on the cake, is that tool that actually will not help you set up the device easily and in an intuitive way. Hey! but don't get me wrong is beautiful! Why? Did u got it? not yet? well... imagine for one second that you have a fairly large infrastructure, hundreds of this devices, how do you configure them in an efficient, fast and semi unmanaged way? yeah!!! That's it, through the CLI. Also because is really bad to have a GUI running on highly available / maxed capped devices.
So I decided to do the whole class using just the CLI, no GUI. I think the experience will be more vivid, as I know now, harder.
So... if you have a step-by-step guide what is the big deal? well, one of the labs didn't have the guide. So I had to figure it out (actually not all by myself, but with the help of a co-worker that took the class as well). This post is just as simple to help you out configure and configure LDAP authentication using the CLI. I hope that this will help someone else.
Here are the steps:
add authentication ldapAction [name of the auth, Ex: my_auth] -ldapBindDnPassword [password] -ldapBase [dc=example,dc=com] -ldapBidDn [admin@example.com] -ldapLoginName [login] -serverIP [IP] add authentication ldapPolicy auth_ldap_policy ns_true my_auth bind system global auth_ldap_policy add system group [group] bind system group [group] -policyName [superuser|read-only|etc]
There you go, easy, just 5 steps.
If you have any questions, just shoot me an email or leave a comment.
Thank you.




