The Permission Attribute Value (For Radius And Ldap) - ATEN CN9000 User Manual

CN8600 User Manual
Item
Search DN

The Permission Attribute Value (for RADIUS and LDAP)

The attribute value for permission is made up of two parts: 1) the IP address of
the CN8600 a user will access; and 2) a string that indicates the access rights
the user has on the CN8600 at that IP address. For example:
192.168.0.80&c,w,j;192.168.0.188&v,l
The makeup of the permission entry is as follows:
 An ampersand (&) connects the CN8600's IP with the access rights string.
 The access rights string is made up of various combinations of the
following characters: c w j p l v s. The characters can be entered in upper
or lower case. See Permitted String Characters table below.
 The characters in the access rights string are separated by a comma (,).
There are no spaces before or after the comma.
 If a user has access rights to more than one CN8600, each permission
segment is separated by a semicolon (;). There are no spaces before or
after the semicolon.
 Use the following keyword for Radius and LDAP setting: su/[username]
– the username must be a real user account that exists in the system.
 LDAP should use CN8600 – iKVM26-userProfile, or can waive this. The
login name must exist in the local account.
38
Set the distinguished name of the search base. This is the
domain name where the search starts for user names.
Action