Configuring Local Database For Management User Authentication - AudioCodes Mediant 4000 SBC User Manual

CHAPTER 16 Services
➢
To clear the LDAP cache:
1. Open the LDAP Settings page (Setup menu > IP Network tab > RADIUS & LDAP folder >
LDAP Settings).
2. Under the Cache Actions group, do the following:
a. From the 'LDAP Group Index' drop-down list, select the required LDAP Server Group (see
Configuring LDAP Server
b. Click Clear Group.

Configuring Local Database for Management User Authentication

You can configure the device to use the Local Users table (local database) to authenticate
management users based on username-password combination. You can configure the device to
use the Local Users table (see
scenarios:
■ LDAP or RADIUS server is not configured (or broken connection) or always use the Local
Users table and only if the user is not found, to use the server.
■ Connection with the LDAP or RADIUS server fails due to a timeout. In such a scenario, the
device can deny access or verify the user's credentials (username-password) locally in the
Local Users table.
If user authentication using the Local Users table succeeds, the device grants management
access to the user; otherwise access is denied. The access level assigned to the user is also
determined by the Local Users table.
●
●
➢
To use the Local Users table for authenticating management users:
1. Open the Authentication Server page (Setup menu > Administration tab > Web & CLI folder
> Authentication Server).
2. Under the General group, do the following:
a. Configure when the Local Users table must be used to authenticate login users. From the
'Use Local Users Database' drop-down list, select one of the following:
◆
◆
b. Configure whether the Local Users table must be used to authenticate login users upon
connection timeout with the server. From the 'Behavior upon Authentication Server
Timeout' drop-down list, select one of the following:
◆
◆
3. Click Apply, and then reset the device with a save-to-flash for your settings to take effect.
Groups).
Configuring Management User Accounts
This feature is applicable to LDAP and RADIUS.
This feature is applicable only to user management authentication.
When No Auth Server Defined (default): When no LDAP/RADIUS server is
configured or if a server is configured but connectivity with the server is down (if the
server is up, the device authenticates the user with the server).
Always: First attempts to authenticate the user using the Local Users table, but if not
found, it authenticates the user with the LDAP/RADIUS server.
Deny Access: User is denied access to the management platform.
Verify Access Locally (default): The device verifies the user's credentials in the
Local Users table.
- 231 -
Mediant 4000 SBC | User's Manual
) upon the following