Appliance And Target Device Query Modes - Avocent Vertiv AutoView 2108 Installer And User Manual

• The Query Mode (Target Device) parameters determine whether or not a user has user access
to target devices connected to an appliance. The user does not have access to the appliance
unless granted by Query Mode (Appliance).
• The Group Container, Group Container Mask and Target Mask fields are only used for group
query modes and are required when performing an appliance or device query.
• The Group Container field specifies the organizational unit (ou) created in Active Directory by
the administrator as the location for group objects.
• Group objects are Active Directory objects that can contain users, computers, contacts
and other groups. Group Container is used when Query Mode is set to Group Attribute.
Each group object, in turn, is assigned members to associate with a particular access level
for member objects (people, appliances and target devices). The access level associated
with a group is configured by setting the value of an attribute in the group object.
• For example, if the Notes property in the group objects list is used to implement the
access control attribute, the Access Control Attribute field on the LDAP Query window
should be set to info. Setting the Notes property to KVM User Admin causes the members
of that group to have user administration access to the appliances and target devices
that are also members of that same group.
• The Notes property is used to implement the access control attribute. The value of the Notes
property, available in group and user objects shown in Active Directory Users and Computers
(ADUC), is stored internally in the directory, in the value of the info attribute. ADUC is a
Microsoft Management Console snap-in for configuring Active Directory. It is started by
selecting S tart - Prog ram s - Ad m in istrative T ools - Active Directory Users an d Com p u ters. This
tool is used to create, configure and delete objects such as users, computers and groups. See

Appliance and Target Device Query Modes

• The Group Container Mask field defines the object type of the Group Container, which is
normally an organizational unit. The default value is ou=%1.
• The Target Mask field defines a search filter for the target device. The default value is cn=%1.
• The Access Control Attribute field specifies the name of the attribute that is used when the
query modes are set to User Attribute or Group Attribute. The default value is info.
To configure LDAP query parameters:
1. Select Ap p lian ce - Ap p lian ce S ettin g s - User Accou n ts - LDAP Accou n ts - Q u ery.
2. Select either Basic, User Attrib u te or Grou p Attrib u te for the Appliance Query Mode and the
Target Device Query Mode.
3. Enter the appropriate information in the Group Container, Group Container Mask, Target Mask
and Access Control Attribute fields.
4. Click S ave.
NOTE: These options cannot be changed if the LDAP Priority is set to LDA P Disabled on the Overview
window.
5.2 Appliance and Target Device Query Modes
One of three different modes can each be used for Query Mode (Appliance) and Query Mode (Target
Device):
• Basic – A username and password query for the user is made to the directory service. If they
are verified, the user is given appliance administrator access to the appliance and any
Vertiv | Avocent® AutoView™ 2108/2216/3108/3216 Switch Installer/User Guide |
on page 40 for more information.
40