ATEN Altusen KN9016 User Manual page 78

KN9008 / KN9016 User Manual
Item
Enable
LDAP / LDAPS
Enable Authorization Select whether to enable Enable Authorization, or not.
LDAP Server IP and
Port
Timeout
LDAP Administrator
DN
LDAP Administrator
Password
Search DN
Admin Group
64
Put a check in the Enable checkbox to allow LDAP / LDAPS
authentication and authorization.
Click a radio button to specify whether to use LDAP or LDAPS.
1. If enabled (the box is checked), the LDAP / LDAPS server
directly returns a 'permission' attribute and authorization for
the user that is logging in. With this selection the LDAP
schema must be extended.
2. If not enabled (no check in the box), the result the server
returns indicates whether the user that is logging in belongs
to the 'KN9008 / KN9016 Admin Group'. If the result is 'yes'
the user has full access rights; if the result is 'no', the user
only has limited access rights.
Note: Consult the LDAP / LDAPS administrator to ascertain
whether to enable the Enable Authorization function, or not.
Fill in the IP address and port number for the LDAP or LDAPS
server. For LDAP, the default port number is 389; for LDAPS,
the default port number is 636.
Set the time in seconds that the KN9008 / KN9016 waits for an
LDAP or LDAPS server reply before it times out.
Consult the LDAP / LDAPS administrator to ascertain the
appropriate entry for this field. For example, the entry might look
like this:
cn=LDAPAdmin,ou=kn9016,dc=aten,dc=com
Key in the LDAP administrator's password.
Set the distinguished name of the search base. This is the
domain name where the search starts for user names.
If Enable Authorization is not checked, this field must include
the entry where the KN9008 / KN9016 Admin Group is created.
Consult the LDAP / LDAPS administrator to ascertain the
appropriate value.
Key in the Group Name for KN9008 / KN9016 administrator
users.
If Enable Authorization is not checked, this field is used to
authorize users that are logging in. If a user is in this group, the
user receives full access rights. If a user is not in this group, the
user only receives limited access rights. Consult the LDAP /
LDAPS administrator to ascertain the appropriate value.
Action