Altusen ALTUSEN CC2000, Руководство пользователя, Страница: 261 / 271

LDAP/LDAPS – OpenLDAP Setting Exam-
247
3. You can check the group definition with LDAP Browser. You should see a
screen similar to the one below:
4. The above example has added a member – cc2000 – to the groups1 group.
To add additional members to the group, edit the file to include them. For
example:
member : cn= cc2000-1 ,ou=software,dc=aten,dc=com
member : cn= cc2000-2 ,ou=software,dc=aten,dc=com
Once these procedures are completed, CC2000 users who are authenticated
through the LDAP/LDAPS server, are authorized according to the permissions
assigned to the group.
Example 2
By default OpenLDAP only supports the Group has Member attribute setting
for the group related schema – this was the setting used in Example 1.
An alternative setting used by other LDAP servers – User has Member Of
attribute – can also supported under OpenLDAP by extending the schema.
In this example the external server is OpenLDAP on Windows Server 2003 as
shown in the LDAP/LDAPS Settings Example on page 237.
1. Under the CC2000 User Manager tab, select Authentication Services
→
Authentication Servers.
2. Select the OpenLDAP server; then click Group Authorization .
3. Click the User has Member Of attribute radio button.
cc2k.book Page 247 Tuesday, December 21, 2010 4:00 PM