2.
On the server, configure the group(s) assigned to each user with one entry for each group,
either in a user definition file in the /etc/openldap directory, as shown in the following
example, or on the command line.
dn: cn=<username>,dc=qa,dc=<domain>,dc=com
uid: <username>
cn: <username>
...
memberof: cn=<Group1>,dc=<domain>,dc=<domain>,dc=com
memberof: cn=d<Group2>,dc=<domain>,dc=<domain>,dc=com
memberof: cn=<Group3>,dc=<domain>,dc=<domain>,dc=com
...
homeDirectory: /home/<username>
NOTE: To give a user administrative access to the MergePoint SP manager, assign the admin group name in a
memberof definition.
Configuring group authorization for RADIUS authentication
The two tasks listed below must be done to configure groups for RADIUS authentication.
•
The RADIUS server's administrator must define the desired groups and assign users to
the groups. See To configure groups on a RADIUS authentication server: on page 96.
•
The MergePoint SP manager's administrator must configure the RADIUS server on
the MergePoint SP manager. The following list defines the values to define when configuring a
RADIUS authentication server on the MergePoint SP manager as shown below.
auth1 server[:port] secret [timeout] [retries]
acct1 server[:port] secret [timeout] [retries]
The following list defines each of the values:
•
auth1: the first RADIUS authentication server
•
acct1: the first RADIUS accounting server
•
server: the RADIUS server address
•
port: (optional) the default port name is radius and is looked up through /etc/services.
•
secret: the shared password required for communication between the MergePoint SP
manager and the RADIUS server
•
retries: the number of times each RADIUS server is tried before another is contacted
•
timeout: the default is 3 seconds. How long the MergePoint SP manager should wait for
the RADIUS server's response.
Chapter 6: Administration Tasks Not Performed in the Web Interface
95
Need help?
Do you have a question about the MERGEPOINT 53XX SP MANAGER and is the answer not in the manual?