Ruckus Wireless ZoneDirector 1200, Руководство пользователя

Страница: 92 / 361

Figure 54: LDAP search filter syntax examples
Group Extraction
By using the Search Filter, you can extract the groups to which a user belongs, as
ZoneDirector to members of specific groups.
For example, in a school setting, if you want to assign members of the group “students”
to a Student role, you can enter a known student’s name in the Test Authentication
Settings section, click Test, and return the groups that the user belongs to. If everything
is configured correctly, the result will display the groups associated with the student,
which should include a group called “student” (or whatever was configured on your
LDAP server).
Next, go to the Configure > Roles page, create a Role named “Student,” and enter
“student” in the Group Attributes field. Then you can select which WLANs you want this
Role to have access to, and decide whether this Role should have Guest Pass generation
privileges and ZoneDirector administration privileges. From here on, any user associated
to the Group “student” will be given the same privileges when he/she is authenticated
against your LDAP server.
To configure user roles based on LDAP group:
1. Point ZoneDirector to your LDAP server:
• Go to Configure > AAA Servers
• Click Edit next to LDAP.
• Enter IP address , Port number , Admin DN and Password .
2. Enter the Key Attribute (default: uid).
3. Click OK to save this LDAP server.
4. In Test Authentication Settings , enter the User Name and Password for a known
member of the relevant group.
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide 92
Configuring Security and Other Services
Using an External AAA Server