Aruba Networks Amigopod 3.7, Deployment Manual

Page: 119 / 438

Amigopod 3.7 | Deployment Guide Operator Logins | 119
Changing Operator Passwords
To change the password for an operator, edit the operator login and type a new password in the “Operator
Password” and “Confirm Password” password fields. You may also want to select “Force a password
change on their next login” under Password Options to allow the operator to select a new password.
Operators can change their own passwords by navigating to Home > Change Password , entering a new
password into the Change Password form, then clicking the Set Password button to save your new
password.
LDAP Operator Authentication
Operators defined externally in your company’s directory server form the second type of Amigopod
operator. Authentication of the operator is performed using LDAP directory server operations. The
attributes stored for an authenticated operator are used to determine what operator profile should be used
for that user.
The Manage LDAP Server and the LDAP Translation Rules commands allow you to set up Amigopod
operator logins integrated with a Microsoft Active Directory domain or another LDAP server.
Manage LDAP Servers
Aruba Amigopod supports a flexible authentication mechanism that can be readily adapted to any LDAP
server’s method of authenticating users by name. There are built-in defaults for Microsoft Active Directory
servers, POSIX-compliant directory servers and RADIUS servers.
When an operator attempts to log in to the Amigopod Visitor Management Appliance, each LDAP server that
is enabled for authentication is checked, in order of priority from lowest to highest.
Once a server is found that can authenticate the operator’s identity (typically with a username and
password), the LDAP server is queried for the attributes associated with the user account.
These LDAP attributes are then translated to Amigopod operator attributes using the rules defined in the
LDAP translation rules. In particular, an Amigopod operator profile will be assigned to the authenticated
user with this process, which controls what that user is permitted to do.
Creating an LDAP Server
An LDAP server is created by navigating to the Administrator > Operator Logins > Servers window,
then clicking the
Create a new LDAP server
icon link. This opens the following window.
The operator management features, such as creating and editing operator logins, apply only to local operator
logins defined in the Amigopod Visitor Management Appliance. You cannot create or edit operator logins using
LDAP. Only authentication is supported.