Raritan Dominion KX II, Руководство пользователя

Страница: 124 / 330

Chapter 6: User Management
114
2. On your Active Directory server, create new groups with the same
group names as in the previous step.
3. On your AD server, assign the Dominion KX II users to the groups
created in step 2.
4. From the Dominion KX II, enable and configure your AD server
properly. See Implementing LDAP/LDAPS Remote Authentication.
Important Notes:
•
Group Name is case sensitive.
•
The Dominion KX II provides the following default groups that cannot
be changed or deleted: Admin and <Unknown>. Verify that your
Active Directory server does not use the same group names.
•
If the group information returned from the Active Directory server
does not match a Dominion KX II group configuration, the Dominion
KX II automatically assigns the group of <Unknown> to users who
authenticate successfully.
•
If you use a dialback number, you must enter the following
case-sensitive string:
msRADIUSCallbackNumber.
•
Based on recommendations from Microsoft, Global Groups with user
accounts should be used, not Domain Local Groups.
Implementing RADIUS Remote Authentication
Remote Authentication Dial-in User Service (RADIUS) is an AAA
(authentication, authorization, and accounting) protocol for network
access applications.
To use the RADIUS authentication protocol:
1. Click User Management > Authentication Settings to open the
Authentication Settings page.
2. Click the RADIUS radio button to enable the RADIUS section of the
page.
3. Click the icon to expand the RADIUS section of the
page.
4. In the Primary Radius Server and Secondary Radius Server fields,
type the IP address of your primary and optional secondary remote
authentication servers, respectively (up to 37 characters).
5. In the Shared Secret fields, type the server secret used for
authentication (up to 37 characters).
The shared secret is a character string that must be known by both
the Dominion KX II and the RADIUS server to allow them to
communicate securely. It is essentially a password.