Ruckus Wireless ZoneDirector 1100 User Manual page 153

Figure 87. LDAP search filter syntax examples
Group Extraction
By using the Search Filter, you can extract the groups to which a user belongs, as
categorized in your LDAP server. Using these groups, you can attribute Roles within
ZoneDirector to members of specific groups.
For example, in a school setting, if you want to assign members of the group
"students" to a Student role, you can enter a known student's name in the Test
Authentication Settings section, click Test, and return the groups that the user
belongs to. If everything is configured correctly, the result will display the groups
associated with the student, which should include a group called "student" (or
whatever was configured on your LDAP server).
Next, go to the Configure > Roles page, create a Role named "Student," and enter
"student" in the Group Attributes field. Then you can select which WLANs you want
this Role to have access to, and decide whether this Role should have Guest Pass
generation privileges and ZoneDirector administration privileges. From here on, any
user associated to the Group "student" will be given the same privileges when he/
she is authenticated against your LDAP server.
To configure user roles based on LDAP group:
1 Point ZoneDirector to your LDAP server:
• Go to Configure > AAA Servers
• Click Edit next to LDAP
ZoneDirector 9.8 User Guide, 800-70599-001 Rev B
Using an External AAA Server
Mouse over
"show more"
LDAP
153