Skybox Appliance 5500 Quick Start Guide
Skybox version 10.1.200
22
6
Save and close the file.
7
Open
/etc/pam_radius.conf
in your editor.
8
Replace
127.0.0.1 secret 1
with the relevant information for your RADIUS
server.
There are 3 fields per line in this file, each line representing a RADIUS
server. The fields are:
server[:port] secret [timeout]
Blank lines or lines beginning with
#
are ignored.
•
The port number is optional. The default port is 1812.
•
The timeout field is optional. The default timeout is 3 seconds.
The timeout field controls how many seconds the module waits before
deciding that the server has failed to respond.
If multiple RADIUS server lines exist, they are tried in order. If a server
returns success or failure, the module returns the same result. If a server fails
to respond it is skipped and the next server is tried.
9
Save and close the file.
10
Add the new user on the OS level by running:
useradd <user1>
There is no need to set the password; it comes from RADIUS.
You can now log in to Skybox with the user credentials:
<user1>
/
<password>
(using the password stored on the RADIUS server for this user).
LDAP authentication
This topic explains how to configure LDAP authentication for Skybox Appliance.
Prerequisites
To use LDAP authentication, the LDAP server must support either TLS/SSL or
secure LDAP (LDAPS).
To set up LDAP authentication
1
On the Security tab, click LDAP.
2
Define the authentication according to the fields shown in the following table.
Field
Description
LDAP Servers URI
A comma-separated list of LDAP servers against which to
authenticate. The format of the URI must match the format
defined in RFC 2396:
ldap[s]://<host>[:<port>]
(
<host>
is
the IP address or name of the LDAP server).
The default ports are:
•
389 for regular LDAP
•
636 for LDAPS
Force SSL
Certification
Enables authentication for SSL certification (LDAPS).
Certificate Authorities If you are using SSL certification, a list of all the CA chains
