Black Box iCompel ICOMP-ICC, Руководство пользователя

Страница: 143 / 174

iCOMPEL Content Commander User Guide
143
In the User Filter field, enter the LDAP filter that will match a user object in the directory (use
%s
where you wish the filter to
contain the username of the user that is logging in). Example user filters for the relevant contexts are:
l
Active Directory –
(objectclass=user)
l
Posix Scheme Directory –
(objectclass=posixAccount)
In the Display Name Attribute field, enter an informal name for the user for the iCC to use where required. This is typically as
described for the relevant context:
l
Active Directory – Typically, the
displayName
or
sAMAccountName
attribute.
l
Posix Scheme Directory – Typically, the
cn
or
uid
attribute.
HTTP Permissions:
After a user has been authenticated to access the iCC web interface through HTTP, the iCC will check the user's
permissions.
For Scope , select Subtree or One level depending on how you want to limit the search for the user object starting from the
Base DN.
Enter the Base DN in the appropriate format for your implementation.
Enter the Filter Attribute appropriate to your context. Example filter attributes for the relevant contexts are:
l
Active Directory –
dn
l
Posix Scheme Directory –
uid
You can set up these permission filters:
Monitor Access Filter Access to player status and system information only.
System Settings Filter Access to the Setup menu and Fonts page.
Layout Manager Filter Access to the Layouts , Schedules , Ad hoc Entry Page , Newsfeeds , Tables , Colors , and Files &
Folders menus
Layout Editor Filter Access to the graphical layout editor.
Publish Channel Filter Access to the Publish Channel menu.
XML Control Filter Access to the XML message interface allowing non-browser based control of the iCC only. (Provides
no access to menu options.)
Set those to LDAP filters that match the user's permissions. Use
%s
where you wish the users username to be written into the
filter.
Typically, the filter checks that the user is a member of a group. Example permission filters for the relevant contexts are:
l
Active Directory –
(&(objectClass=group)(member=%s)(distinguishedName=CN=player
monitor,OU=Security Groups,DC=yourdomain,DC=uk))
l
Posix Scheme Directory –
(&(objectClass=posixGroup)(memberUid=%s)(cn=monitor))