Quantum Scalar i40, Руководство пользователя

Страница: 113 / 328

Chapter 4: Configuring the Library
Working With LDAP User Accounts (Remote Authentication)
Quantum Scalar i40 and Scalar i80 User’s Guide 87
directory service user name and password and specify an LDAP domain.
See Logging In When LDAP or Kerberos is Enabled on page 105.
LDAP logins are only available on the library Web client.
Using Microsoft Active
Directory
The library supports the Microsoft® Active Directory® LDAP server. If
you use Microsoft Active Directory, you must use either:
• Windows® Services for Unix® 2.5
• Kerberos
If you use Kerberos, you don’t need to use Windows Services for Unix
2.5. For specific instructions on configuring Kerberos, see Configuring
Kerberos on page 90.
If you use Windows Services for Unix 2.5:
• When setting up a user account in Microsoft Active Directory, make
sure to populate the UNIX attributes with information. This requires
all Active Directory users to be part of an NIS Domain, or have NIS
Domain information entered. After entering NIS Domain
information for a user, you will need to reset the user’s password.
• The library supports user account information in the schema defined
by RFC 2307. User password schemes must be encrypted using UNIX
crypt. In addition, user names (uid) and passwords (userPassword)
must be created using lowercase characters to be compatible with
the library.
LDAP Server Guidelines
For LDAP users with user privileges, access to library partitions is
determined by group assignment on the LDAP server. Groups must be
created on the LDAP server with names that correspond to the library
partition names. Users with user privileges must be assigned to these
groups on the LDAP server to have access to the corresponding
partitions on the library. LDAP users with administrative privileges have
access to all partitions and administrative functions and do not need to
be assigned to partition-related groups on the LDAP server.
The Web client Login screen displays LDAP login options only when
LDAP is enabled.