Ldap Authentication; Group Authorization; Tacacs+ Authorization On Serial Ports; Table 3.7: Ldap Authentication Parameters - Avocent Cyclades ACS Command Reference Manual

52 ACS Advanced Console Server Command Reference Guide
6. Save your changes.
# saveconf

LDAP Authentication

To configue LDAP authentication on the ACS console server:
1. Execute the following command. Refer to Table 3.7 for authentication parameters.
cli> config security authentication [parameter] <value>
2. Activate and save your configuration.

Table 3.7: LDAP Authentication Parameters

Parameter
ldapbasedomain
ldapserver
secureldap

Group Authorization

This feature enables the group information retrieval from the authentication servers TACACS+,
RADIUS and LDAP. It adds another layer of security by adding a network-based authorization. It
retrieves the group information from the authentication server and performs an authorization
through the ACS console server.

TACACS+ authorization on serial ports

By enabling the raccess parameter, administrators implement an additional level of security
checking. After each user is successfully authenticated through the standard login procedure, the
ACS console server uses TACACS+ to authorize user access to specific serial ports.
By default, the raccess parameter is disabled. When enabled, users are denied access unless they
have the proper authorization, which must be set on the TACACS+ server itself.
To configure TACACS+ authorization on serial ports:
1. Enable raccess authorization parameter.
cli> config security authentication tacplusraccess [yes|no]
2. Configure serial ports for user or group access.
cli> config physicalports <'all' or range/list[1-xx]> access users/
groups <list of users or group names separated by commas>
3. Activate and save your configuration.
Value Description
<ldapbasedomain> Distinguished name of the search base. dc=cyclades,dc=com
<n.n.n.n> LDAP server IP address or name.
yes|no To use secure LDAP.