Security Settings - Ldap; Ldap Options - AMX NX-1200 Webconsole And Programming Manual

Security Settings - LDAP

The LDAP page provides configuration and tests connection to a remote directory service via LDAPv3. The master supports the
option of an insecure or secure connection. The secure option is supported via the StartTLS command in LDAP and also via
"LDAPS", or LDAP over SSL/TLS on port 636. Select the LDAP option on the Security Page to access the LDAP Settings page
(FIG. 42). The options on this page allow authorized users to enable and modify LDAP security settings.
Security - LDAP page
FIG. 45

LDAP Options

All parameters are case sensitive and must be entered exactly as they are entered into the LDAP database. You can also perform
LDAP Client Configuration via terminal commands to the NetLinx Master's Program Port - see the Enabling LDAP via the Program
Port section on page 123 for details.
See Appendix A: LDAP Implementation Details on page 127 for additional information on implementing LDAP on the NetLinx Master.
The LDAP options are described in the following table:
LDAP Options
Option
LDAP Enabled:
LDAP URI
LDAP BASE DN
BIND DN
User Query Attr
Search Password
Click the LDAP enabled check box to make the LDAP options available for selection.
When LDAP is enabled, users are authenticated using the configuration set up on the LDAP server.

The "administrator" user is handled by the local NetLinx Master, and does not connect to the LDAP server for user

verification.
NX-Series Controllers - WebConsole & Programming Guide
Description
This parameter enables the LDAP configuration parameters described below.
NOTE: When LDAP is enabled, you can only create device users. If the administrator user has been
deleted, you must perform a factory reset of the Master via pushbutton to restore the administrator
user.
This parameter has the syntax ldap[s]://hostname:port.
• The ldap:// URL is used to connect to LDAP servers over unsecured connections.
• The ldaps:// URL is used to connect to LDAP server over Secure Sockets Layer (SSL) connections.
• The hostname parameter is the name or IP address, in dotted format, of the LDAP server (for example,
LDAPServer01 or 192.202.185.90).
• The port parameter is the port number of the LDAP server (for example, 696).
NOTE: The standard unsecured port number is 389 and the standard secured port number is 636.
This parameter specifies the Distinguished Name (DN) of an entry in the directory. It identifies the entry
that is the starting point of the user search.
This parameter specifies the Distinguished Name (DN) to use to bind to the LDAP server for the initial
search for the user's DN.
This LDAP attribute is used for the AMX equipment user search (for example, UID).
NOTE: This attribute MUST be unique in the context of the LDAP BASEDN or the search will fail.
This is the password used for the initial bind to the LDAP server - it is the password associated with BIND
DN.
WebConsole - Security Options
54