Appendix C Updating The Ldap Schema; Returning User Group Information; From Ldap/Ldaps; From Microsoft Active Directory - Raritan Dominion KX II User Manual

Appendix C Updating the LDAP Schema

Returning User Group Information

Note: The procedures in this chapter should be attempted only by
experienced users.
In This Chapter
Returning User Group Information ........................................................ 307
Setting the Registry to Permit Write Operations to the Schema ........... 308
Creating a New Attribute ....................................................................... 308
Adding Attributes to the Class ............................................................... 309
Updating the Schema Cache................................................................. 311
Editing rciusergroup Attributes for User Members ................................ 311
Use the information in this section to return User Group information (and
assist with authorization) once authentication is successful.

From LDAP/LDAPS

When an LDAP/LDAPS authentication is successful, the KX II
determines the permissions for a given user based on the permissions of
the user's group. Your remote LDAP server can provide these user group
names by returning an attribute named as follows:
rciusergroup
This may require a schema extension on your LDAP/LDAPS server.
Consult your authentication server administrator to enable this attribute.
In addition, for Microsoft
memberOf is used.

From Microsoft Active Directory

Note: This should be attempted only by an experienced Active Directory
administrator.
Returning user group information from Microsoft's
Windows 2000 ® operating system server requires updating the
LDAP/LDAPS schema. See your Microsoft documentation for details.
1. Install the schema plug-in for Active Directory. See Microsoft Active
Directory documentation for instructions.
2. Run Active Directory Console and select Active Directory Schema.
attribute type: string
® ®
Active Directory , the standard LDAP
®
®
Active Directory for
307