Table of Contents
Advertisement
LDAP Settings
To allow authentication and authorization via LDAP or LDAPS, the Active
Directory's LDAP Schema must be extended so that an extended attribute
name for the CN8600 – iKVM26-userProfile – is added as an optional attribute
to the person class.
To manually find out the attribute name of the CN8600 – iKVM26-userProfile,
go to Ping Host under Maintenance and execute a tc get command, see Ping
Host, page 27 for details.
In order to configure the LDAP server, you will have to complete the following
procedures: 1) Install the Windows Server Support Tools; 2) Install the Active
Directory Schema Snap-in; and 3) Extend and Update the Active Directory
Schema.
To allow authentication and authorization for the CN8600 via LDAP / LDAPS,
refer to the information in the following table.
Item
Enable
LDAP / LDAPS
LDAP Server
Port
Timeout (seconds)
Admin DN
Admin Name
Password
Put a check in the Enable checkbox to allow LDAP / LDAPS
authentication and authorization.
Click a radio button to specify whether to use LDAP or LDAPS.
Fill in the IP address and port number for the LDAP or LDAPS
server. For LDAP, the default port number is 389; for LDAPS,
the default port number is 636.
Set the time in seconds that the CN8600 waits for an LDAP or
LDAPS server reply before it times out.
Consult the LDAP / LDAPS administrator to ascertain the
appropriate entry for this field. For example, the entry might
look like this:
cn=LDAPAdmin,ou=cn8600,dc=aten,dc=com
Key in the Group Name for CN8600 administrator users.
Key in the LDAP administrator's password.
Chapter 4. Configuration
Action
37
Advertisement
Table of Contents
