Black Box iCompel ICOMP-ICC, Руководство пользователя

Страница: 142 / 174

9. Setup
142
Bind:
Select Allow Anonymous Bind to use anonymous binding to the LDAP server. Otherwise select Bind using DN and
complete the Bind Username and Bind Password .
For example, the bind username is a distinguished name (DN) like:
cn=Manager,dc=yourdomain,dc=com
.
FTP User:
The information in this section is used to authenticate users and give them permission to gain FTP read/write access to the
iCC. You will need to know how to find the user object in the directory that corresponds to the username given to FTP.
For Scope , select Subtree or One level depending on how you want to limit the search for the user object starting from the
Base DN.
Enter the Base DN in the appropriate format for your implementation.
Set the Login Username Attribute to an attribute that will contain the username given to FTP. This is typically as described
for the relevant context:
l
Active Directory – Typically, the
sAMAccountName
attribute.
l
Posix Scheme Directory – Typically, the
uid
attribute.
In the User Filter field, enter the LDAP filter that will match a user object in the directory (use
%s
where you wish the filter to
contain the username of the user that is logging in).
Recommendation : If possible, add checks for group membership to control which users can access FTP on the iCC.
Example user filters for the relevant contexts are:
l
Active Directory –
(&(sAMAccountName=%s)(objectclass=user)(memberOf=CN=iCC ftp
access,OU=Security Groups,DC=yourdomain,DC=com))
l
Posix Scheme Directory –
(&(uid=%s)(objectclass=posixAccount))
HTTP User:
The information in this section is used to authenticate users to use the web interface of the iCC. Permissions are set in the
next section. You will need to know how to find the user object in the directory that corresponds to the username given to
HTTP.
For Scope , select Subtree or One level depending on how you want to limit the search for the user object starting from the
Base DN.
Enter the Base DN in the appropriate format for your implementation.
Set the Login Username Attribute to an attribute that will contain the username given to HTTP. This is typically as described
for the relevant context:
l
Active Directory – Typically, the
sAMAccountName
attribute.
l
Posix Scheme Directory – Typically, the
uid
attribute.