Table of Contents
Advertisement
RADIUS Examples
RADIUS Server access rights examples are given in the table, below:
String
c,w
User has administrator privileges; user can access the system via the
Windows Client.
w,j,l
User can access the system via the Windows Client; user can access the
system via the Java Applet; user can access log information via the
user's browser.
pn/0102
User cannot access station 01, port 02
pf/a
User can access all ports
sv/2
User can only view station 02
CC Management Settings
To allow authorization for the KN9008 / KN9016 through a CC (Control
Center) server, check Enable and fill in the CC Server's IP address and the port
that it listens on in the appropriate fields.
LDAP Settings
The KN9008 / KN9016 allows log in authentication and authorization through
external programs. To allow authentication and authorization via LDAP or
LDAPS, the Active Directory's LDAP Schema must be extended so that an
extended attribute name for the KN9008 / KN9016 – KN9016-accessRight –
is added as an optional attribute to the person class.
Note: Authentication refers to determining the authenticity of the person
logging in; authorization refers to assigning permission to use the
device's various functions.
In order to configure the LDAP server, you will have to complete the following
procedures: 1) Install the Windows Server Support Tools; 2) Install the Active
Directory Schema Snap-in; and 3) Extend and Update the Active Directory
Schema.
To allow authentication and authorization for the KN9008 / KN9016 via LDAP
/ LDAPS, refer to the information in the table on the following page. For more
information, please see the Downloads page on the ATEN website at
www.aten.com.
Chapter 6. Administration
Meaning
63
Advertisement
Table of Contents
