76
FIG. 81
Security - LDAP page
WebConsole - Security Options
Security Settings - LDAP
The LDAP page provides configuration and tests connection to a remote directory service via LDAPv3. The master supports the
option of an insecure or secure connection. The secure option is supported via “LDAPS”, or LDAP over SSL/TLS on port 636. Se-
lect the
LDAP
option on the Security Page to access the
LDAP Settings
page (FIG. 78). The options on this page allow authorized
users to enable and modify LDAP security settings.
LDAP Options
All parameters are case sensitive and must be entered exactly as they are entered into the LDAP database. You can also perform
LDAP Client Configuration via terminal commands to the NetLinx Master’s Program Port - see the Enabling LDAP via the Program
Port section in the NetLinx Programming Guide (available at www.amx.com) for details.
See Appendix A: LDAP Implementation Details in the NetLinx Programming Guide (available at www.amx.com) for additional infor-
mation on implementing LDAP on the NetLinx Master. The LDAP options are described in the following table:
Instruction Manual - Incite Digital Video Presentation Systems
LDAP Options
Option
Description
LDAP Enabled:
This parameter enables the LDAP configuration parameters described below.
NOTE:
When LDAP is enabled, you can only create device users. If the administrator user has been
deleted, you must perform a factory reset of the Master via pushbutton to restore the administrator
user.
LDAP URI
This parameter has the syntax ldap[s]://hostname:port.
• The ldap:// URL is used to connect to LDAP servers over unsecured connections.
• The ldaps:// URL is used to connect to LDAP server over Secure Sockets Layer (SSL) connections.
• The hostname parameter is the name or IP address, in dotted format, of the LDAP server (for
example,
LDAPServer01 or 192.202.185.90).
• The port parameter is the port number of the LDAP server (for example, 696).
NOTE:
The standard unsecured port number is 389 and the standard secured port number is 636.
LDAP BASE DN
This parameter specifies the Distinguished Name (DN) of an entry in the directory. It identifies the
entry that is the starting point of the user search.
BIND DN
This parameter specifies the Distinguished Name (DN) to use to bind to the LDAP server for the
initial search for the user’s DN.
User Query Attr
This LDAP attribute is used for the AMX equipment user search (for example, UID).
NOTE:
This attribute MUST be unique in the context of the LDAP BASEDN or the search will fail.
Search Password
This is the password used for the initial bind to the LDAP server - it is the password associated with
BIND DN.