Raritan EMX2-111, Руководство пользователя

Страница: 481 / 565

469
This section provides an LDAP example for illustrating the configuration
procedure using Microsoft Active Directory
®
(AD). To configure LDAP
authentication, four main steps are required:
a. Determine user accounts and roles (groups) intended for the EMX
b. Create user groups for the EMX on the AD server
c. Configure LDAP authentication on the EMX device
d. Configure roles on the EMX device
Important: Raritan disables SSL 3.0 and uses TLS for releases 3.0.4,
3.0.20 and later releases due to published security vulnerabilities in
SSL 3.0. Make sure your network infrastructure, such as LDAP and
mail services, uses TLS rather than SSL 3.0.
In This Chapter
Step A. Determine User Accounts and Roles ......................................... 468
Step B. Configure User Groups on the AD Server .................................. 469
Step C. Configure LDAP Authentication on the EMX Device................... 471
Step D. Configure Roles on the EMX Device ........................................... 472
Step A. Determine User Accounts and Roles
Determine the user accounts and roles (groups) that are authenticated
for accessing the EMX. In this example, we will create two user roles
with different permissions. Each role (group) will consist of two user
accounts available on the AD server.
User roles User accounts (members)
usera EMX_User
emxuser2
userb EMX_Admin
emxuser
Group permissions:

The EMX_User role will only have read-only permissions.

The EMX_Admin role will have full system permissions.
Appendix E LDAP Configuration Illustration