LEGRAND Raritan SRC-0100, Руководство пользователя

Страница: 598 / 698

586
This section provides an LDAP example for illustrating the configuration
procedure using Microsoft Active Directory
®
(AD). To configure LDAP
authentication, four main steps are required:
a. Determine user accounts and roles (groups) intended for the SRC
b. Create user groups for the SRC on the AD server
c. Configure LDAP authentication on the SRC
d. Configure roles on the SRC
Important: Raritan disables SSL 3.0 and uses TLS due to published
security vulnerabilities in SSL 3.0. Make sure your network
infrastructure, such as LDAP and mail services, uses TLS rather
than SSL 3.0.
In This Chapter
Step A. Determine User Accounts and Roles ......................................... 585
Step B. Configure User Groups on the AD Server .................................. 586
Step C. Configure LDAP Authentication on the SRC............................... 588
Step D. Configure Roles on the SRC ....................................................... 591
Step A. Determine User Accounts and Roles
Determine the user accounts and roles (groups) that are authenticated
for accessing the SRC. In this example, we will create two user roles
with different permissions. Each role (group) will consist of two user
accounts available on the AD server.
User roles User accounts (members)
usera SRC_User
emxuser2
userb SRC_Admin
emxuser
Group permissions:

The SRC_User role will only have read-only permissions.

The SRC_Admin role will have full system permissions.
Appendix F LDAP Configuration Illustration