Altusen ALTUSEN CC2000, User Manual, Page: 86 / 271

CC2000 User Manual
72
Group Authorization
For LDAP, LDAPS, and Active Directory there is an additional authentication
method in which the access rights for a specified group are set. This function
is used to make it easier to authorize users with accounts on an external
authentication server. Instead of having to authorize the user on a rights-by-
rights basis, the administrator assigns the user to a group, and the user inherits
the rights that the group has.
To add a group for group authorization, do the following:
1. Under User Management
→
Authentication Services , select the external
authentication server from the Sidebar or the main panel list. The server’s
Properties page comes up.
2. Select Group Authorization (on the Panel Menu bar). The Group
Authorization page appears:
Note: 1. The screenshot shows a page that appears if an LDAP service was
chosen. The LDAP Group Related Schema settings fields do not
appear if Active Directory was selected.
2. For the LDAP Group Related Schema settings, get the
information for these fields from the LDAP administrator. For
example settings see
LDAP Group Authorization Setting
Examples , page 245.
3. The default setting for OpenLDAP is Group has Member
attribute – see Example 1 , page 245. This method adds members
to groups on the LDAP server.
The alternative setting is User has Member Of attribute – see
Example 2 , page 247. With this method groups are added to the
users’ accounts on the LDAP server.
cc2k.book Page 72 Tuesday, December 21, 2010 4:00 PM