Draco tera flex
Configuration via OSD
79
7.3.6
Setting LDAP Configuration (Active Directory)
NOTICE
To initialize the LDAP configuration changes, the matrix must be restarted. Restarting the matrix can take
several minutes and the matrix is not available during the restart.
The KVM matrix can be synchronized with the directory service Active Directory with regard to user
authentication. This allows the user to login at the KVM matrix using login information from the Active
Directory service and to contact the Active Directory Server for each authentication that does in fact the
proper authentication.
The connection between KVM matrix and the Active Directory server is established via OpenLDAP and
periodically synchronized every 5 minutes.
The search of users to be synchronized and automatically added to the KVM matrix configuration can either
be based on a
group
or
organizational unit (OU)
. In both cases a user requires to be at least assigned to
one group:
•
In case of the group, all users belonging to a previously defined group on the active directory server are
added to the KVM matrix and synchronized. In this alternative, the organizational structure of the
organizational units (OUs) is added as matrix user group to the KVM matrix configuration. This means
that the organizational unit (OU) that includes the user can be found as a matrix user group in the KVM
matrix configuration after the synchronization. A user can be member of up to 8 groups.
•
In case of the organizational unit, all users belonging to groups that are located directly under this
organizational unit are added and synchronized. The groups can also include subgroups. The structure
of the groups is added to the KVM matrix configuration as user group. Each group will be represented in
the KVM matrix as a user group after the synchronization. Groups that are located in sub organizational
units will be ignored.
Fig. 68
OSD Menu Configuration - Network
