GE Revolution CT, Руководство пользователя

Страница: 610 / 702

○ If you use LDAP authentication without SSL, passwords are not sent securely. This is
not recommended. An alert is posted for this configuration. With Kerberos and non-SSL,
the authentication is encrypted, but the LDAP traffic is not.
5. Click [Test Connection] to test if the machine can connect to the enterprise directory server.
○
If the connection is successful,
CONNECTION OK
is displayed next to [Test Connection].
○ If the connection is unsuccessful,
CONNECTION BAD
is displayed next to [Test
Connection]. This indicates there is a problem connecting to the enterprise directory
server.
Check the following:
■
Server Name/IP
■
If the system has DNS running.
■ If the system can resolve the
Server Name/IP
.
6. Once the
Test Connection
is successful, select the
Server Type
for the enterprise directory
server (Microsoft Active Directory, Novell eDirectory, et cetera).
7. Click [Generate Defaults] to populate the
Realm Name
,
Format
,
DN
,
Login Attribute
,
First
Name Attribute
,
Last Name Attribute
, and
Group Attribute
fields with default values for the
enterprise directory server type.
○
If the enterprise directory type is MSAD, both the
Realm Name
and the
DN
are
populated.
○ If the enterprise directory type is eDirectory, the
Realm Name
is left blank. If you are
configuring an enterprise directory server that is not MSAD or Novell eDirectory, the
configuration must be done manually. Get the correct LDAP property information from
the owner of the enterprise directory server.
○ If this is a non-MSAD, non-eDirectory server, or is a server with a non-default
configuration, manually change properties, as needed.
8. Enter a
Username
and
Password
for a user that resides on the enterprise directory server.
9. Click [Login] to see if the login is successful.
○
The
First Name
,
Last Name
, and any
Group Memberships
for the user are displayed. If
First Name , Last Name , or Group Memberships are not found, a warning is posted
indicating:
■
The LDAP properties are not configured correctly (
First Name Attribute
,
Last Name
Attribute
, and/or
Group Attribute
).
■ The user does not have a
First Name
,
Last Name
, or any
Group Memberships
configured on the enterprise directory server.
○
If you get these warnings, contact the owner of the enterprise directory server to verify it
is configured properly.
Revolution CT User Manual
Direction 5480385-1EN, Revision 1
610 2 Access Controls