Raritan PX3TS, Руководство пользователя

Страница: 730 / 842

706
This section provides an LDAP example for illustrating the configuration
procedure using Microsoft Active Directory
®
(AD). To configure LDAP
authentication, four main steps are required:
a. Determine user accounts and roles (groups) intended for the PX3TS
b. Create user groups for the PX3TS on the AD server
c. Configure LDAP authentication on the PX3TS device
d. Configure roles on the PX3TS device
Important: Raritan disables SSL 3.0 and uses TLS for releases 3.0.4,
3.0.20 and later releases due to published security vulnerabilities in
SSL 3.0. Make sure your network infrastructure, such as LDAP and
mail services, uses TLS rather than SSL 3.0.
In This Chapter
Step A. Determine User Accounts and Roles ......................................... 705
Step B. Configure User Groups on the AD Server .................................. 706
Step C. Configure LDAP Authentication on the PX3TS Device ............... 707
Step D. Configure Roles on the PX3TS Device........................................ 708
Step A. Determine User Accounts and Roles
Determine the user accounts and roles (groups) that are authenticated
for accessing the PX3TS. In this example, we will create two user roles
with different permissions. Each role (group) will consist of two user
accounts available on the AD server.
User roles User accounts (members)
usera PX_User
pxuser2
userb PX_Admin
pxuser
Group permissions:

The PX_User role will have neither system permissions nor outlet
permissions.

The PX_Admin role will have full system and outlet permissions.
Appendix F LDAP Configuration Illustration