AudioCodes Mediant 500 MSBR, Руководство пользователя

Страница: 232 / 1248

User's Manual 232 Document #: LTRT-10375
Mediant 500 MSBR
18.3.8.2 Clearing the LDAP Cache
You can remove (clear) all LDAP entries in the device's LDAP cache for a specific LDAP
Server Group, as described in the following procedure.

To clear the LDAP cache:
1. Open the LDAP Settings page ( Setup menu > IP Network tab > RADIUS & LDAP
folder > LDAP Settings ).
2. Under the Cache Actions group, do the following:
a. From the 'LDAP Group Index' drop-down list, select the required LDAP Server
Group (see Configuring LDAP Server Groups on page 218).
b. Click Clear Group .
18.3.9 Configuring Local Database for Management User
Authentication
You can configure the device to use the Local Users table (local database) to authenticate
management users based on username-password combination. You can configure the
device to use the Local Users table (see Configuring Management User Accounts on page
71) upon the following scenarios:

LDAP or RADIUS server is not configured (or broken connection) or always use the
Local Users table and only if the user is not found, to use the server.

Connection with the LDAP or RADIUS server fails due to a timeout. In such a
scenario, the device can deny access or verify the user's credentials (username-
password) locally in the Local Users table.
If user authentication using the Local Users table succeeds, the device grants
management access to the user; otherwise access is denied. The access level assigned to
the user is also determined by the Local Users table.
Note:
•
This feature is applicable to LDAP and RADIUS.
•
This feature is applicable only to user management authentication.

To use the Local Users table for authenticating management users:
1. Open the Authentication Server page ( Setup menu > Administration tab > Web &
CLI folder > Authentication Server ).
Figure 18-25: Local Users Table for Login Authentication
2. Under the General group, do the following:
a. Configure when the Local Users table must be used to authenticate login users.
From the 'Use Local Users Database' drop-down list, select one of the following:
♦
When No Auth Server Defined (default): When no LDAP/RADIUS server
is configured or if a server is configured but connectivity with the server is
down (if the server is up, the device authenticates the user with the server).
♦
Always: First attempts to authenticate the user using the Local Users table,
but if not found, it authenticates the user with the LDAP/RADIUS server.