Raritan PX3TS, Руководство пользователя

Страница: 337 / 842

Chapter 6: Using the Web Interface
313
For security purposes, users attempting to log in to the PX3TS must be
authenticated. The PX3TS supports the following authentication
mechanisms:

Local user database on the PX3TS

Lightweight Directory Access Protocol (LDAP)

Remote Access Dial-In User Service (Radius) protocol
By default, the PX3TS is configured for local authentication. If you stay
with this method, you only need to create user accounts. See
Creating
Users
(on page 256).
If you prefer external authentication, you must provide the PX3TS with
information about the external Authentication and Authorization (AA)
server.
If both local and external authentication is needed, create user accounts
on the PX3TS in addition to providing the external AA server data.
When configured for external authentication, all PX3TS users must have
an account on the external AA server. Local-authentication-only users
will have no access to the PX3TS except for the admin, who always can
access the PX3TS.
If the external authentication fails, an "Authentication failed" message is
displayed. Details regarding the authentication failure are available in
the event log. See
Viewing or Clearing the Local Event Log
(on page
412).
Note that only users who have both the "Change Authentication Settings"
and "Change Security Settings" permissions can configure or modify the
authentication settings.
To enable external authentication:
1. Collect external AA server information. See Gathering LDAP/Radius
Information
(on page 314).
2. Enter required data for external AA server(s) on the PX3TS. See
Adding LDAP/LDAPS Servers
(on page 315) or
Adding Radius
Servers
(on page 318).

For illustrations, see LDAP Configuration Illustration (on page
705) or
Radius Configuration Illustration
(on page 718).
3. If both the external and local authentication is needed, or you have to
return to the local authentication only, see
Managing External
Authentication Settings
(on page 320).