Black Box iCOMPEL 2U Series User Manual page 130

iCOMPEL Digital Signage User Guide (V9.2.3)
complete the Bind Username and Bind Password.
For example, the bind username is a distinguished name (DN) like:
FTP User:
The information in this section is used to authenticate users and give them permission to gain FTP read/write access to the
iCOMPEL. You will need to know how to find the user object in the directory that corresponds to the username given to
FTP.
For Scope, select Subtree or One level depending on how you want to limit the search for the user object starting from
the Base DN.
Enter the Base DN in the appropriate format for your implementation.
Set the Login Username Attribute to an attribute that will contain the username given to FTP. This is typically as
described for the relevant context:
Active Directory – Typically, the
Posix Scheme Directory – Typically, the
In the User Filter field, enter the LDAP filter that will match a user object in the directory (use
to contain the username of the user that is logging in).
Recommendation: If possible, add checks for group membership to control which users can access FTP on the
iCOMPEL.
Example user filters for the relevant contexts are:
Active Directory –
(&(sAMAccountName=%s)(objectclass=user)(memberOf=CN=iCOMPEL ftp access,OU=Security
Groups,DC=yourdomain,DC=com))
Posix Scheme Directory –
HTTP User:
The information in this section is used to authenticate users to use the web interface of the iCOMPEL. Permissions are set
in the next section. You will need to know how to find the user object in the directory that corresponds to the username
given to HTTP.
For Scope, select Subtree or One level depending on how you want to limit the search for the user object starting from
the Base DN.
Enter the Base DN in the appropriate format for your implementation.
Set the Login Username Attribute to an attribute that will contain the username given to HTTP. This is typically as
described for the relevant context:
Active Directory – Typically, the
Posix Scheme Directory – Typically, the
In the User Filter field, enter the LDAP filter that will match a user object in the directory (use
to contain the username of the user that is logging in). Example user filters for the relevant contexts are:
Active Directory –
(objectclass=user)
130
Copyright © 2010-2013 Black Box Network Services. All Rights Reserved.
attribute.
sAMAccountName
attribute.
uid
.
(&(uid=%s)(objectclass=posixAccount))
attribute.
sAMAccountName
attribute.
uid
.
724-746-5500 | blackbox.com
cn=Manager,dc=yourdomain,dc=com
.
where you wish the filter
%s
where you wish the filter
%s