Tripp Lite B051-000 IP Access rights examples are given in the table below, User Value Meaning

Page 22

Administration

LDAP Configuration (continued)

f)Click Edit to bring up the String Attribute Editor:

g)Replace the value shown with the desired B051-000 permission attribute value. (See below for details.)

The Permission Attribute Value is made up of two parts; the IP address of the B051-000 a user will access and a string that indicates the access rights the user has on the B051-000 at that IP address. The following rules apply to the makeup of the permission attribute value entry:

An ampersand (&) connects the B051-000’s IP address with the access rights string.

The access rights string is made up of various combinations of the following characters: c w j l v s. The characters can be entered in upper or lower case. The meaning of the characters is provided in the Permission String Characters table, below.

The characters in the access rights string are separated by a comma (,). There are no spaces before or after the comma.

If a user has access rights to more than one B051-000, each permission segment is separated by a semicolon (;). There are no spaces before or after the semicolon.

Character

Meaning

C

Grants the user administrator privileges, allowing the user to configure the system.

W

Allows the user to access the system via the Windows Client program.

J

Allows the user to access the system via the Java applet.

L

Allows the user to access log information via the user’s browser.

V

Limits the user’s access to only viewing the video display.

S

Allows the user to use the Virtual Media function.

Access rights examples are given in the table below:

User

Value

Meaning

User1

10.0.0.166&w,v

1. User has Windows Client and View Only rights on a B051-000 with an IP address of 10.0.0.166.

2. User has no rights on any other B051-000 units administered by the LDAP server.

 

 

 

 

 

 

 

1. User has Virtual Media rights on a B051-000 with an IP address of 10.0.0.164.

User2

10.0.0.164&s;10.0.0.166&j,c

2. User has Java Applet and Administrator rights on a B051-000 with an IP address of 10.0.0.166.

 

 

3. User has no rights on any other B051-000 units administered by the LDAP server.

User3

v,l;10.0.0.164&j

1. User has View Only and Log Information rights on all B051-000 units administered by the LDAP server.

2. User has Java Applet rights on a B051-000 with an IP address of 10.0.0.164.

 

 

 

 

 

User4

 

User has no access rights to any B051-000 units administered by the LDAP server.

User5

v,w

User has View Only and Windows Client rights on all B051-000 units administered by the LDAP server.

 

 

1. User has View Only rights on all B051-000 units administered by the LDAP server, except for the

User6

v;10.0.0.166&;10.0.0.164&c,j

ones with IP addresses of 10.0.0.166 and 10.0.0.164.

2. User has no access rights on the B051-000 with an IP address of 10.0.0.166.

 

 

 

 

3. User has Administrator and Java Applet rights on the B051-000 with an IP address of 10.0.0.164.

h)Click OK. When you return to the Attribute Editor page, the permission entry now reflects the new permissions:

i)Click Apply to save the change and complete the procedure.

j)Repeat Step 3 (Edit Active Directory Users With the Extended Schema) for any other users you wish to add.

22

Image 22
Contents IP Remote Access Unit ModelTable of Contents Appendix Introduction FeaturesResolution Refresh Rates System RequirementsBrowsers CablesOperating Systems Virtual Media SupportComponent Description ComponentsFront View Rear ViewGeneral Safety Instructions Hardware SetupSafety Instructions Rack Mounting Safety InstructionsRack Mounting Setup InstructionsDIN Rail Mounting Installation IP Address Determination Setting up an IP AddressIP Installer BrowserAP Windows Client Click Install Certificate Browser LoginInstalling the Certificate LoggingUtility Icons Administration IconsScreen Elements Remote Console PreviewComputer Network AdministrationGeneral Field ExplanationIP Address Access PortsIP Installer Settings DNS ServerFiltering SecurityOverview IP FilteringAdvanced Network Management Settings Anms MAC Filtering Character Meaning Radius Settings Ldap Authentication Settings String MeaningActive Directory Ldap ConfigurationSelect New → Attribute Administration Access rights examples are given in the table below User Value MeaningOpenLDAP Server OpenLDAP Server InstallationOpenLDAP Server Configuration Starting the OpenLDAP ServerDIT Creation Customizing the OpenLDAP SchemaLdap DIT Design and Ldif File Ldap Data StructureLog Server Settings Using the New SchemaUser Management Customization Backup Configuration / User Accounts MaintenanceFirmware Upgrade Parameter ExplanationRestore Configuration / User Accounts Navigation Windows ClientStarting Up Mouse Synchronization TipsSun / Linux Windows Client Control Panel Hotkey SetupIcon Description Action Description Default Hotkey Video SettingsConfiguring the Hotkeys GrayscaleMessage Board Virtual MediaVirtual Media Icons On-Screen Keyboard Button BarCtrl+Alt+Del ExitJava Applet Click the Pointer Options tabWindows Java Applet Control Panel Ctrl + F12 + Del Button Function Ctrl+Alt+Del Log File Log File ScreenMenu Bar ConfigureLog Server AddDelete EventsEdit SearchOptions HelpList Panel Log Server Main ScreenEvent Panel Windows Client Connection Screen AP OperationStart → All Programs → B051-000 → iClient Administrator Utility GeneralAccess Ports NetworkFinishing Up OverviewTo modify an IP Filter IP FilteringTo delete an IP Filter To delete a MAC FilterAnms Extend and Update the Active Directory Schema Install the Windows 2003 Support ToolsInstall the Active Directory Schema Snap-in Active DirectoryLocate the user you wish to edit. Our example uses jason With IP addresses of 10.0.0.166 OpenLDAP Server Ldap Data Structure DIT Creation User Management Timeout, Login failure, and Working mode parameters AP Java Client Upgrading the FirmwareJava Client Connection Screen Connection Setup Example Windows XP SpecificationsBasic Setup AppendixTroubleshooting Log Server Sun / Linux Warranty FCC Part 68 Notice United States Only