In ZENworks Control Center, click the Configuration tab.

In the User Sources panel, click New to launch the Create New User Source Wizard.

Follow the prompts to create the connection to the user source.

For information about each of the wizard pages, click the Help button or refer to the following table:

Wizard Page	Details
Connection Information page	Specify the information required to create a connection to the LDAP directory: Connection Name: Specify a descriptive name for the connection to the LDAP directory. Address: Specify the IP address or DNS hostname of the server where the LDAP directory resides. Use SSL: By default, this option is enabled. Disable the option if the LDAP server is not using the SSL (Secure Socket Layer) protocol. Port: This field defaults to the standard SSL port (636) or non-SSL port (389) depending on whether the Use SSL option is enabled or disabled. If your LDAP server is listening on a different port, select that port number. Root Context: The root context establishes the point in the directory where you can begin to browse for user containers. Specifying a root context can enable you to browse less of the directory, but it is optional. If you don’t specify a root context, the directory’s root container becomes the entry point.
Certificate Page	(Conditional) If you selected Use SSL on the previous Wizard page (Connection Information), the Certificate page displays as the next. step in the Wizard. Ensure that the Certificate is correct.
Credentials page	Specify a username and password for accessing the directory: Username: Specify the username for a user that has read-only access to the directory. The user can have more than read-only access, but read-only access is all that is required and recommended. For Novell eDirectory access, use standard LDAP notation. For example: cn=admin_read_only,ou=users,o=mycompany For Microsoft Active Directory, use standard domain notation. For example: AdminReadOnly@mycompany.com Password: Specify the password for the user you specified in the Username field.
Authentication Mechanisms page	Select the mechanism used to authenticate users to the ZENworks Management Zone. The available mechanisms depend on whether you are configuring a Novell eDirectory or a Microsoft Active Directory user source. Kerberos: Active Directory only. Enables Kerberos authentication in which the Active Directory server generates a Kerberos ticket that Novell Common Authentication Services Adapter (CASA) uses to authenticate the user, instead of using a username and password. Kerberos authentication is often used with smart cards. Username/Password: eDirectory or Active Directory. Enables simple authentication using a username and password. Shared Secret: eDirectory only. Enables a user to automatically log in to ZENworks when a smart card is used to log in to eDirectory. This option is enabled only if the schema of the eDirectory specified in the Connection Information page is extended using the novell-zenworks-configure tool.If Shared Secret is not selected as an authentication mechanism, a ZENworks login dialog box is displayed when the user on the managed device attempts to log in to eDirectory using a smart card. After the user specifies the eDirectory username and password, that password is stored in Novell SecretStore. The next time the user uses a smart card to log in to eDirectory, the password is retrieved from SecretStore and the user is logged in to the ZENworks without having to specify the password. If you select both available mechanisms (Kerberos and Username/Password for Active Directory or Username/Password and Shared Secret for eDirectory), ZENworks Configuration Management attempts to use the first mechanism for authentication. If authentication fails, the next mechanism is used. For example, if you select Kerberos and Username/Password for Active Directory, ZENworks Configuration Management first attempts to use Kerberos authentication. If Kerberos authentication fails, simple Username/Password authentication is used.
User Containers page	After you connect to an LDAP directory as a user source, you can define the containers within the directory that you want exposed. The number of user containers you define is determined by how much of the directory you want to expose. Consider the following example: Assume that you want to enable all users in the Accounting and Sales containers to receive ZENworks content. In addition, you want to be able to access the user groups located in the Accounting, Sales, and Groups containers in order to distribute content based on those groups. To gain access to the users and groups, you have two options: Assume that you want to expose only the user and user groups in the Accounting, Sales, and Groups containers. To gain access to those users and groups, you have two options: You can add MyCompany/EMEA as a user container, so all containers located below EMEA are visible in ZENworks Control Center, including the Servers and Services containers. Only users and user groups located in the EMEA containers are visible (servers and services are not), but the structure is still exposed. You can add MyCompany/EMEA/Accounting as one user container, MyCompany/EMEA/Sales as a second container, and MyCompany/EMEA/Groups as a third container. Only these containers become visible as folders beneath the MyCompany directory reference in ZENworks Control Center. To add the containers where users reside: Click Add to display the Add User Container dialog box. In the Context field, click to browse for and select the desired container. In the Display Name field, specify the name you want used for the user container when it is displayed in ZENworks Control Center. Click OK to add the container to the list.

In ZENworks Control Center, click the Configuration tab.

In the User Sources panel, select the check box next to the user source, then click Delete.

Click OK to confirm the deletion.

In ZENworks Control Center, click the Configuration tab.

In the User Sources panel, click the underlined link for a user source.

You can edit the following settings:

The ZENworks system uses the username to access the LDAP directory. The username must provide read-only access to the directory. You can specify a username that provides more than read-only access, but read-only access is all that is required and recommended.

For Novell eDirectory access, use standard LDAP notation when specifying the username. For example:

cn=admin_read_only,ou=users,o=mycompany

For Microsoft Active Directory, use standard domain notation. For example:

AdminReadOnly@mycompany.com

For more information, see Section 31.2, Authentication Mechanisms.

If you edit this option, you must do the following for every connection that is listed in the connections panel:

The root context establishes the point in the directory where you can begin to browse for user containers. Specifying a root context can enable you to browse less of the directory, but it is completely optional. If you don’t specify a root context, the directory’s root container becomes the entry point. Click Edit to modify the root context.

In ZENworks Control Center, click the Configuration tab.

In the User Sources panel, click the user source.

In the User Containers panel, click Add to display the Add User Container dialog box, then fill in the following fields:

Click OK to add the user container.

The container, and its users and user groups, is now available on the Users page.