User authentication
Terminal Access Controller Access-Control System Plus ()
IX20 User Guide
508
10. Set the distinguished name (DN) on the server to search for users. This can be the root of the
directory tree (for example,
dc=example,dc=com
) or a sub-tree (for example.
ou=People,dc=example,dc=com
).
(config)> auth ldap base_dn
value
(config)>
11. (Optional) Set the name of the user attribute that contains the list of IX20 authentication
groups that the authenticated user has access to. See
for further
information about the group attribute.
(config)> auth ldap group_attribute
value
(config)>
For example:
(config)> auth ldap group_attribute ou
(config)>
12. Configure the amount of time in seconds to wait for the server to respond.
(config)> auth ldap timeout
value
(config)>
where
value
is any integer from
3
to
60
. The default value is
3
.
13. Add an server:
a. Add the server:
(config)> add auth server end
(config auth server 0)>
b. Enter the server's IP address or hostname:
(config auth server 0)> hostname
hostname|ip-address
(config auth server 0)>
c. (Optional) Change the default port setting to the appropriate port:
(config auth server 0)> port
port
(config auth server 0)>
d. Enter the server's shared secret. This is configured in the key parameter of the
server's tac_plus.conf file. For example:
(config auth server 0)> secret
testing123
(config auth server 0)>
e. (Optional) Repeat the above steps to add additional servers.
14. Add to the authentication methods. Authentication methods are attempted in the
order they are listed until the first successful authentication result is returned. This example
will add to the end of the list. See
for information about
adding methods to the beginning or middle of the list.
