7. Administration (continued)
7.3.4ANMS (continued)
8.In the Search DN field, set the distinguished name of the search base (i.e. the domain name where the search starts for the user name). Note: If the Enable Authorization checkbox is not checked, this field must include the entry where the KVM Admin Group is created. Consult the LDAP/S administrator about the appropriate entry for this.
9.In the Admin Group field, key in the group name for KVM administrator accounts. Note: If the Enable Authorization checkbox is not checked, this field is used to authorize accounts that are logging in. Accounts that are in this group have full access rights to the KVM. Accounts that are not in this group have user access rights to the KVM (See the User Management section of this manual for details on account permissions). Consult the LDAP/S administrator about the appropriate entry for this.
10.On the LDAP server, set the access rights for each user (The following sections describe how to configure LDAP/S for use with the KVM switch).
LDAP/S Server Configuration
To allow authentication and authorization via LDAP or LDAPS, the active directory’s LDAP Schema must be extended so that an extended attribute name for the KVM – permission – is added as an optional attribute to the person class.
Note: Authentication refers to the identity verification of the person logging into the KVM switch, whereas Authorization refers to the assigning of device permissions.
In order to configure the LDAP server, you will have to complete the following procedures:
•Install the Windows Support Tools
•Install the Active Directory Schema
•Extend and Update the Active Directory Schema
Each of these procedures is described in the following sections:
Install the Windows Support Tools
1.On your Windows server CD, open the Support 
Tools folder.
2.In the right panel of the dialog box that comes up, double click SupTools.msi.
3.Follow along with the Installation Wizard to complete the procedure.
Install the Active Directory Schema
1.Open a Command prompt.
2.Key in regsvr32 schmmgmt.dll to register schmmgmt.dll on your computer.
3.Open the Start menu. Click Run and key in mmc /a. Click OK.
4.In the File menu of the screen that appears, click Add/Remove
5.Under Available Standalone
6.On the screen you are in, open the File menu and click Save.
7.When prompted where to save, specify the C:\Windows\system32 directory.
8.Key in the filename schmmgmt.msc.
9.Click Save to complete the procedure.
Extend and Update the Active Directory Schema – Create a New Attribute
1.Open Control Panel 
Administrative Tools 
Active Directory Schema.
2.In the left panel of the screen that comes up,
3.Select New 
Attribute.
4.A warning message appears. Click Continue to bring up the Create New Attribute dialog box.
5.Fill in the dialog box and click OK. The Common Name and LDAP Display Name fields can be populated as
46
