Returning User Group Information From Active Directory Server - Raritan Dominion KX II-101-V2 User Manual

Chapter 5: User Management
88
17. The KX II-101-V2 provides you with the ability to test the LDAP
configuration from the Authentication Settings page due to the
complexity sometimes encountered with successfully configuring the
LDAP server and KX II-101-V2 for remote authentication. To test the
LDAP configuration, enter the login name and password in the
"Login for testing" field and the "Password for testing" field
respectively. This is the username and password you entered to
access the KX II-101-V2 and that the LDAP server will use to
authenticate you. Click Test.
Once the test is completed, a message will be displayed that lets you
know the test was successful or, if the test failed, a detailed error
message will be displayed. It will display successful result or detail
error message in failure case. It also can display group information
retrieved from remote LDAP server for the test user in case of
success.

Returning User Group Information from Active Directory Server

The KX II-101-V2 supports user authentication to Active Directory
without requiring that users be defined locally on the KX II-101-V2. This
allows Active Directory user accounts and passwords to be maintained
exclusively on the AD server. Authorization and AD user privileges are
controlled and administered through the standard KX II-101-V2 policies
and user group privileges that are applied locally to AD user groups.
IMPORTANT: If you are an existing Raritan, Inc. customer, and have
already configured the Active Directory server by changing the AD
schema, the KX II-101-V2 still supports this configuration and you
do not need to perform the following operations. See Updating the
LDAP Schema for information about updating the AD LDAP/LDAPS
schema.
To enable your AD server on the KX II-101-V2:
1. Using the KX II-101-V2, create special groups and assign proper
permissions and privileges to these groups. For example, create
groups such as KVM_Admin and KVM_Operator.
®
(AD)