Manuals / Schneider Electric / Computer Equipment / Switch

Schneider Electric AP561x manual Group Based Authentication

Models: AP561x

1 26

Download 26 pages 30.42 Kb

Page 22

Group Based Authentication

Group Based Authentication

All content in this presentation is protected – © 2008 American Power Conversion Corporation

Image 22

Schneider Electric AP561x manual Group Based Authentication

Contents

LDAP Implementation AP561x KVM Switches LDAP Implementation Does not require LDAP Schema to be touchedUses existing Schema Attribute field to store configuration setting Allows easy implementationAttribute IP KVM authentication levelsBasic GroupSettings Used in this Lab LDAP Server LDAP Lab LayoutServer1 Server2 KVM IPKVM1Server3 OBWI ClientSynchronize Server Module names to AD Computer Object names Name the Server Modules via the Local Port OSD APC by Schneider ElectricActive Directory Tasks StartProgramsAdministrative ToolsActive Directory Users and Computers2. Select New Organizational Unit Create User to Browse the Directory queries instead of using the Admin accountThis is a special user account specifically for LDAP APC by Schneider Electric1. Right-click IPKVM OU 2. Choose New GroupCreate two groups for IP KVM switch administrators and users APC by Schneider ElectricNOTE In a production environment, groups in the Active Directory IPKVM OU would match the organizations hierarchy, usually by function, geography, or a combination 2. Click Properties Add the users andServer Modules to the appropriate groups that associate them 5. Click Object Types 6. Select Computers and UsersCreate Computer Object in AD for the IP KVM Switch Log into the Switch APC by Schneider ElectricFrom the Configure screen, select SNMP and name the switch IPKVM1 Name the SwitchAPC by Schneider Electric Click on Authentication under Appliance in the Configuration Menu Enable LDAP AuthenticationAPC by Schneider Electric Check the Use LDAP Authentication box. On the Server Parameters tab, enter the IP address of the Primary Server 192.168.5.100 domain controller Configure LDAP Search Parameters Leave Query Parameter at Basic APC by Schneider ElectricTest the basic LDAP Authentication Ideal for smaller customers Very basic Quick to set up All users have administrator rightsBasic Summary APC by Schneider ElectricGroup Based Authentication Change LDAP Query to Group Click on ConfigureQuery Mode IP KVM Switch and Group Attribute for Query Mode Server Enter the Group Container IPKVM and test againAPC by Schneider Electric Attributes set to groups rather than individual users Hugely scalable Group SummaryHighly granular security Port level control Ideal for Enterprise customersConclusion APC by Schneider Electric