P e n d i x a, Ldap Configuration Interface File | RSA Security 6.1

A p p e n d i x A

Using the LDAP Configuration Interface

The LDAP Configuration Interface (LCI) is an optional add-on to

RSA RADIUS Server. You must enter a separate license number and restart RSA RADIUS Server to activate LCI functions. After the license key is registered, you can edit the settings in the configuration files. For information on adding license numbers, see “Adding a License Key” on page 43.

This appendix provides:

XThe file used to enable and configure the LDAP configuration interface (LCI)

XAn overview of the LCI and LDAP utilities

XA description of the LDAP virtual schema

XInformation about how to use LDAP utilities to configure the RSA RADIUS Server database

XSample LDIF files that control the execution of LDAP utilities

XInformation about how to view rate statistics variables with LCI utilities

LDAP Configuration Interface File

The radius.ini file specifies (among other things) the interfaces on which RSA RADIUS Server listens for LCI requests. If a specification is not present, RSA RADIUS Server listens for LCI requests on all bound IP ports.

RSA RADIUS Server 6.1 Administrator’s Guide Using the LDAP Configuration Interface

81

Image 93

RSA Security 6.1 manual P e n d i x a, Ldap Configuration Interface File

Contents

RSA Radius Server 6.1 Administrator’s Guide Contact Information Trademarks Distribution Contents Chapter Installing the RSA Radius Server Chapter Administering Profiles Glossary Index About This Guide AudienceWhat’s In This Manual Syntax Conventions RSA Radius Server Documentation Related DocumentationVendor Information Requests for Comments RFCs Getting Support and Service Third-Party ProductsBefore You Call for Customer Support About RSA Radius Server RSA Radius Server Features About RSA Radius Server September RSA Radius Server Overview RSA Radius Authentication Radius Packets Radius Configuration Radius Server ConfigurationRadius Client Configuration Radius Shared Secrets Radius Secret Replication SecretNode Secret Radius Ports Authentication Accounting Comma-Delimited Log Files Accounting Sequence Tunneled Accounting Dictionaries AttributesVendor-Specific Attributes Make/Model Field Checklist Attributes Attribute ListsUpdating Attribute Information Attribute Values Return List AttributesMulti-Valued Attributes Orderable Attributes Default ValuesSystem Assigned Values Echo Property Centralized Configuration Management Designating a New Primary Radius Server Replacing a Replica Radius Server Changing the Name or IP Address of a Server Recovering a Replica After a Failed Download Before You Begin Installing the RSA Radius ServerRequired Files Data Migration/Registration System Requirements Installing on Windows If you are installing a Replica RSA Radius Server, click Installing the RSA Radius Server Uninstalling the RSA Radius Server Software Installer Syntax Installing on Solaris Path Reppkg Installing the RSA Radius Server Software Enter RSA administration port Stopping and Starting the Radius Daemon Migration Log File Linux Server System Requirements Installing on Linux Should be overwritten Installing the RSA Radius Server Software Enter RSA administration port Etc/init.d/sbrd stop # ./uninstallrsa.sh Running RSA Radius Administrator Using RSA Radius Administrator Navigating in RSA Radius Administrator RSA Radius Administrator MenusFile Menu Panel Menu See , Administering Radius Clients on RSA Radius Administrator Toolbar Web MenuHelp Menu Adding an Entry RSA Radius Administrator Windows Sample Add Window Editing an Entry Sample Edit Window Cutting/Copying/Pasting Records Resizing Columns Using Context MenusChanging Column Sequence Sorting Information Accessing Online Help Displaying Version InformationAdding a License Key Add a License for Server Window Exiting the RSA Radius Administrator Radius Clients Panel Administering Radius Clients Add Radius Client Window Adding a Radius Client Secret to display the characters in the shared secret Deleting a Radius Client Verifying a Shared SecretPage Administering Radius Clients September Administering Profiles Adding a Checklist or Return List Attribute for a ProfileAbout Profiles Resolving Profile and User Attributes Default Profile Adding a Profile Setting Up Profiles Click Add to add this attribute/value pair to the list Removing a Profile Administering Profiles September Displaying Statistics Displaying Server Authentication Statistics Statistics Panel System Authentication Statistics Radius client is sending incorrectly formed packets to Statistics Panel System Accounting Statistics Displaying Server Accounting Statistics Accounting Statistic Meaning Displaying Radius Client Statistics Resetting Server Statistics Optionally, sort the messages by clicking a column header Displaying Statistics September Administering Radius Servers Adding a Radius Server Manually Replication Panel Add Server Window Deleting a Radius Server Enabling a Radius Server Notifying Replica Radius Servers Publishing Server Configuration Information Designating a New Primary Radius Server Recovering a Replica After a Failed Download Changing the Name or IP Address of a Server Regenerating a Node Secret Resetting the Radius Database Administering Radius Servers September Using the Radius System Log LoggingLogging Files Controlling Log File Size Level of Logging Detail Accounting Log File Format Using the Accounting Log Comma Placeholders First Line Headings Acct-Status-Type Standard Radius Accounting Attributes Acct-Input-Packets P e n d i x a Ldap Configuration Interface File Ldap Utilities About the Ldap Configuration Interface Downloading the Ldap Utilities Ldap Requests Ldap Version Compliance Configuring the Ldap TCP Port Available Attributes Ldap Virtual Schema Ldap Schema Slide 2 Ldap Schema Slide 3 Cn=username,o=radius -w passcode cachedPW Unspecified or 0.0.0.0 RAS IP address When you display Searching for Records Ldap Command Examples Ldapmodify Option Meaning Modifying Records Where Adding Records Deleting Records Statistics Variables Counter StatisticsStattype server Stattype accounting Stattype authentication Rate Statistics Using the Ldap Configuration Interface September AAA Glossary DNS Tokencode Radius Servers TLS 104 Glossary September Index Tokencode