Digi IX20, Руководство пользователя

Страница: 507 / 726

User authentication Terminal Access Controller Access-Control System Plus ()
IX20 User Guide 507
(config)> auth group_attribute attribute-name
(config)>
5. (Optional) Configure the type of service. This is the value of the service attribute in the the
server's configuration. For example, in user configuration , the value of the
service attribute in the sample tac_plus.conf file is system , which is also the default setting in
the IX20 configuration.
(config)> auth service service-name
(config)>
6. Set the type of TLS connection used by the LDAP server:
(config)> auth ldap tls value
(config)>
where value is one of:
n
off : Uses a non-secure TCP connection on the LDAP standard port, 389.
n
on : Uses an SSL/TLS encrypted connection on port 636.
n
start_tls : Makes a non-secure TCP connection to the LDAP server on port 389, then
sends a request to upgrade the connection to a secure TLS connection. This is the
preferred method for LDAP.
The default is off .
7. If tls is set to on or start_tls , configure whether to verify the server certificate:
(config)> auth ldap verify_server_cert value
(config)>
where value is either:
n
true : Verifies the server certificate with a known Certificate Authority.
n
false : Does not verify the certificate. Use this option if the server is using a self-signed
certificate.
The default is true .
8. Set the distinguished name (DN) that is used to bind to the LDAP server and search for users.
Leave this option unset if the server allows anonymous connections.
(config)> auth ldap bind_dn dn_value
(config)>
For example:
(config)> auth ldap bind_dn cn=user,dc=example,dc=com
(config)>
9. Set the password used to log into the LDAP server. Leave this option unset if the server allows
anonymous connections.
(config)> auth ldap bind_password password
(config)>