Clearing The Ldap Cache; Configuring Local Database For Management User Authentication - AudioCodes Mediant 4000 SBC User Manual

User's Manual

15.4.8.2 Clearing the LDAP Cache

You can remove (clear) all LDAP entries in the device's LDAP cache for a specific LDAP
Server Group, as described in the following procedure.

To clear the LDAP cache:
1. Open the LDAP Settings page (Setup menu > IP Network tab > RADIUS & LDAP
folder > LDAP Settings).
2. Under the Cache Actions group, do the following:
a. From the 'LDAP Group Index' drop-down list, select the required LDAP Server
Group (see ''Configuring LDAP Server Groups'' on page 240).
b. Click Clear Group.
15.4.9 Configuring Local Database for Management User
Authentication
You can configure the device to use the Local Users table (local database) to authenticate
management users based on username-password combination. You can configure the
device to use the Local Users table (see ''Configuring Management User Accounts'' on
page 69) upon the following scenarios:

LDAP or RADIUS server is not configured (or broken connection) or always use the
Local Users table and only if the user is not found, to use the server.

Connection with the LDAP or RADIUS server fails due to a timeout. In such a
scenario, the device can deny access or verify the user's credentials (username-
password) locally in the Local Users table.
If user authentication using the Local Users table succeeds, the device grants
management access to the user; otherwise access is denied. The access level assigned to
the user is also determined by the Local Users table.
Note:
•
This feature is applicable to LDAP and RADIUS.
•
This feature is applicable only to user management authentication.

To use the Local Users table for authenticating management users:
1. Open the Authentication Server page (Setup menu > Administration tab > Web &
CLI folder > Authentication Server).
Figure 15-32: Local Users Table for Login Authentication
2. Under the General group, do the following:
a. Configure when the Local Users table must be used to authenticate login users.
From the 'Use Local Users Database' drop-down list, select one of the following:
♦
♦
Version 7.2
When No Auth Server Defined (default): When no LDAP/RADIUS server
is configured or if a server is configured but connectivity with the server is
down (if the server is up, the device authenticates the user with the server).
Always: First attempts to authenticate the user using the Local Users table,
253
15. Services
Mediant 4000 SBC