Eaton Network-M2, User Manual

Page: 160 / 268

Pairing agent to the Network Module
Servicing the Network Management Module – 160
1.
2.
1.
2.
3.
4.
1.
2.
3.
4.
•
•
•
•
•
•
•
Configure the rules to mapped LDAP users to profile:
Enter LDAP group name.
Select the profile to assigned.
You can define up to 5 mapping rules.
All LDAP users belonging to the configured LDAP group will have permissions granted by the associated profile.
4.1.1.4 Testing profile mapping
Refer to the section Information>>>CLI>>>ldap-test to get help on the CLI command.
To test LDAP users profile mapping:
Connect to the CLI.
Launch
ldap-test --checkmappedgroups command.
This command will verify each mapped group exists in the LDAP base and will display the associated local profile.
In case of error, use the verbose option of the command to investigate the reason.
4.1.1.5 Define LDAP user's preferences
This step configures the user's preferences to apply to all LDAP users.
4.1.2 Testing LDAP authentication
Refer to the section Information>>>CLI>>>ldap-test to get help on the CLI command.
Connect to the CLI.
Launch ldap-test --checkauth command.
This command will verify an LDAP user can authenticate using his username and password and will display its local profile.
In case of error, use the verbose option of the command to investigate the reason
4.1.3 Limitations
If the same username exists in both local and LDAP databases, the behavior is undefined.
If a user belongs to multiple LDAP groups mapped to different profiles, the behavior is undefined.
No client certificate provided. It is not possible for the server to verify the client authenticity.
It is not possible to configure LDAP to work with 2 different search bases.
LDAP user's preferences are common to all LDAP users.
LDAP users cannot change their password through the Network Module.
The remote groupname entered in profile mapping settings must be composed only of
alphanumeric
s, underscore and
hyphen characters (but this last one can't be at the beginning).
4.2 Pairing agent to the Network Module
Authentication and encryption of connections between the UPS network module and shutdown agents is based on matching
certificates.
4.2.1 Pairing with credentials on the agent
STEP 1: Action on the agent (IPP/IPM).
1. Connect to the web interface of the agent.
2. Detect the UPS Network Module with an Address(es) scan, select Override global authentication settings and type the UPS
Network Module credentials.
If a user belongs to multiple LDAP groups mapped to different profiles, the behavior is undefined.