Prima IP User Manual Rev 1.5 2007
- -
67
4.17
Users/Remote Servers – Tuning in with the
Remote Authentication Servers
The
User Remote Authentication
page allows you to authenticate the users that try to connect to PRIMA IP,
from centralized servers running a Radius service or hosting a directory that can be accessed through the
LDAP protocol (Active Directory for example). This feature permits to integrate the PRIMA IP into your
global enterprise user management.
By default, the Remote Authentication is configured as
NONE
, i.e., all remote authentications are disabled.
In this case, the authentication is all done locally by using the database on PRIMA IP only.
After you have made all modifications, click
Store Settings
to save your settings and then hit
Apply
Settings/Restart Servers
to validate these new settings.
No change you have made on this page will apply until you hit
Apply Settings/Restart Servers
!
Authentication Server Type:
Here you can select whether you want to disable, or enable the remote server
authentication by LDAP or RADIUS server. Before you go forth with subsequent settings on this page, you
should check with your network administrator for the availability of either a LDAP server or a RADIUS
server.
•
To disable the remote authentication support: Select
None
for the Authentication Server Type.
•
To enable LDAP authentication support: Select
LDAP
for the Authentication Server Type.
•
To enable RADIUS authentication support: Select
RADIUS
for the Authentication Server Type.
4.17.1 Directory Server Using LDAP
Using LDAP SSL Access:
Check this option if you want to enable SSL access of the LDAP authentication
server. However, to use this option, you should make sure your LDAP server support SSL, and you have to
install a distinct set of certificates – ldapcert.crt and ldapkey.pem – onto Prima IP by uploading them through
the
Security page
. Normally the directory server itself generates these certificates.
