Opengear ACM5000, Руководство пользователя

Страница: 198 / 335

Chapter 9: Authentication
198
Console Server & RIM Gateway User Manual
TomFraser
AmandaJones
FredWhite
JanetLong
Cleartext-
Password := ”FraTom70”
Framed-Filter-
Id=”:group_name=admin:”
Cleartext-
Password := ”JonAma83”
Cleartext-
Password := ”WhiFre62”
Framed-Filter-
Id=”:group_name=testgroup1,users:”
Cleartext-
Password := ”LonJan57”
Framed-Filter-
Id=”:group_name=admin:”

Additional local groups such as testgroup1 can be added via Users & Groups: Serial & Network
9.1.8 Remote groups with LDAP authentication
Unlike RADIUS, LDAP has built in support for group provisioning, which makes setting up remote groups easier. The
console server will retrieve a list of all the remote groups that the user is a direct member of, and compare their names
with local groups on the
console server .
Note: Any spaces in the group name will be converted to underscores.
For example, in an existing Active Directory setup, a group of users may be part of the “
UPS Admin
” and “
Router Admin
”
groups. On the console server , these user
s will be required to have access to a group “
Router_Admin
”, with access to
port 1 (connected to the router), and another group “
UPS_Admin
”, with access to port 2 (connected to the UPS). Once
LDAP is setup, users that are members of each group will have the appropriate permissions to access the router and
UPS.