Avocent Cyclades ACS, Инструкция по установке/администрированию/использованию

Страница: 136 / 212

120 Cyclades ACS Advanced Console Server Installation, Administration and Users Guide
the console server uses to determine whether or not each user/group is authorized to
access specific serial ports.
By default the Enable Raccess Authorization is disabled allowing all users full authorization. When
this feature is enabled by placing a check mark in the box, users/groups are denied access unless
they have the proper authorization, which must be set on the authentication server
itself. To see the configuration procedures for a authentication server, refer to the
Cyclades ACS Advanced Console Server Command Reference Guide.
To configure an LDAP authentication server:
Perform the following procedure to configure an LDAP authentication server when the console
server or any of its ports are configured to use the LDAP authentication method or any of its
variations (LDAP, LDAP/Local or LDAPDownLocal).
Before starting this procedure, you will need the following information from the LDAP
server administrator:
• The distinguished name of the search base
• The LDAP domain name
• Whether to use secure LDAP
• The authentication server’s IP address
You can enter information in the LDAP User Name, LDAP Password and LDAP Login Attribute
fields, but an entry is not required:
Work with the LDAP server administrator to ensure that the following types of accounts are set up
on the LDAP server and that the administrators of the console server and the connected devices
know the passwords assigned to the accounts:
• An account for admin.
• If LDAP authentication is specified for the console server, accounts for all users who need to
log into the console server to administer connected devices.
• If LDAP authentication is specified for serial ports, accounts for users who need administrative
access to the connected devices.
1. Go to Security - Authentication - LDAP in Expert mode. The LDAP form displays with LDAP
Server and LDAP Base fields filled in from with the current values in the /etc/ldap.conf file.