Altusen KN1000, User Manual

Page: 61 / 194

4. Administration
47
.
Item Action
Enable Put a check in the Enable checkbox to allow LDAP / LDAPS
authentication and authorization.
LDAP / LDAPS Click a radio button to specify whether to use LDAP or LDAPS.
Enable Authorization Select whether to enable Enable Authorization , or not.
1. If enabled (the box is checked), the LDAP / LDAPS server
directly returns a ‘permission’ attribute and authorization for
the user that is logging in. With this selection the LDAP
schema must be extended.
2. If not enabled (no check in the box), the result the server
returns indicates whether the user that is logging in belongs
to the ‘KN1000 Admin Group’. If the result is ‘yes’ the user
has full access rights; if the result is ‘no’, the user only has
limited access rights.
Note: Consult the LDAP / LDAPS administrator to
ascertain whether to enable the Enable Authorization
function, or not.
LDAP Server IP and
Port Fill in the IP address and port number for the LDAP or LDAPS
server. For LDAP, the default port number is 389; for LDAPS,
the default port number is 636.
Timeout Set the time in seconds that the KN1000 waits for an LDAP or
LDAPS server reply before it times out.
LDAP Administrator
DN Consult the LDAP / LDAPS administrator to ascertain the
appropriate entry for this field. For example, the entry might
look like this:
kn=LDAPAdmin,ou=kn1000,dc=aten,dc=com
LDAP Administrator
Password Key in the LDAP administrator’s password.
Search DN Set the distinguished name of the search base. This is the
domain name where the search starts for user names.
Note: If Enable Authorization is not checked, this field must
include the entry where the KN1000 Admin Group is created.
Consult the LDAP / LDAPS administrator to ascertain the
appropriate value.
KN1000 Admin Group Key in the Group Name for KN1000 administrator users.
Note: If Enable Authorization is not checked, this field is used
to authorize users that are logging in. If a user is in this group,
the user receives full access rights. If a user is not in this
group, the user only receives limited access rights. Consult the
LDAP / LDAPS administrator to ascertain the appropriate
value.