Brocade Communications Systems IP250 user manual Configuring an Ldap server, Local Database

12 AAA Settings tab

•Verifies user privileges on the Local database

8.Set secondary authentication by selecting one of the following options from the Secondary Authentication list:

•Local Database

•None

9.Set the fall back condition to secondary authentication by selecting one of the following options from the Switch to secondary authentication when list:

•LDAP Servers Not Reachable

•LDAP Authentication Failed

•User Not Found in LDAP

10.Set the authorization preference by selecting one of the following options from the Authorization Preference list:

•Local Database

Use the LDAP server for authentication and the Management application local database for authorization.

The user name in the local database must match the LDAP user name (password does not need to match) and must have the appropriate roles and AORs. If the Management application user name and LDAP user name do not match, create the user and assign the respective roles and AORs (refer to “User Account Management” on page 181).

•Primary Authentication Server

Use the LDAP server for authentication and authorization.

In the LDAP server, create new custom attributes (NmRoles & NmAors) in the AD server and assign the appropriate Roles and AORs (refer to “Configuring roles and AORs on the external LDAP server” on page 204).

If this user already exists in the local database, the roles and AORs are overwritten with the new roles and AORs configured in the LDAP Server.

•LDAP Authorization

Use to assign roles and AORs to user groups and not to individual users.

When roles and AORs are assigned to a group, all AD users in the group can obtain the roles and AORS assigned to the group. To assign roles and AORs to an AD Group, refer “Assigning roles and AORs to an AD group” on page 201.

You do not need to create users in the local database.

11.Click Apply to save the configuration.

To display the authentication audit trail, refer to “Displaying the client authentication audit trail” on page 391.

12.Click Close to close the Server Management Console.

Configuring an LDAP server

To add or edit a LDAP server, complete the following steps.

1.Select the AAA Settings tab.

2.Select LDAP Server from the Primary Authentication list.

384	Brocade Network Advisor IP User Manual
	53-1003056-01