LDAP Authentication
Authentication and authorization is provided by the remote LDAP server.
NOTE: If you are using an out-of-the-box Linux OpenLDAP installation, you must add the
"Info" attribute to specify the Unity-group authorization, or the LDAP authorization will not work. See
Adding "Info" Attribute to LDAP Schema for Linux OpenLDAP
LDAP Settings
[Enable/Disable selection]
Enables LDAP authentication in the card.
LDAP Server
IP address of LDAP server.
LDAP Base
Base Distinguished Name, the path to the LDAP user accounts.
LDAP Secure
SSL mode.
Database UserName
Bind Distinguished Name, the service account used to access the LDAP server.
Database Password
Password for the service account that accesses the LDAP server.
Login Attributes
Account attribute that authenticates the user credentials, for example: CN.
Server Configuration Requirements for LDAP Authentication
The value for
info
must be
unity_group=unityadmin;
– or –
unity_group=unityuser;
•
The attributes are entered into a config file or a GUI interface depending on the authentication
server implementation.
•
The
unity_group=unityuser;
can be used in the same manner as
unity_group=unityadmin;
.
•
The
unity_group=unityadmin;
and
unity_group=unityuser;
string must be terminated with a
semicolon.
6 Editing the Unity Card Configuration
33