Dell PowerEdge 2321DS User Manual - Page 201

Configuring the LDAP Authentication Parameters, Enabling LDAP Authentication

Page 201 highlights

Configuring the LDAP Authentication Parameters The Authentication panel allow you to configure your authentication and authorization configuration parameters. You can send the username, password, and other information to the Remote Console Switch, which then uses LDAP to retrieve data from the Directory Service in order to determine what permissions the user has. Enabling LDAP Authentication The Authentication Settings field allows you to choose Local or LDAP Authentication. Click the Use LDAP Authentication checkbox to authenticate against the LDAP-enabled directory service. Once LDAP is enabled, the RCS and Root Domains should be designated in the provided fields. Entering Authentication Parameters If you plan to install the Dell Extended Schema, enter only the RCS and Root Domains that will be used. If you elect not to use the Dell Extended Schema, the RCS Switches and access controlled SIPs in your installation will be configured as Computer Objects within Active Directory. To do this, you will first need to configure an Organizational Unit to hold group objects that relate users to access controlled Remote Console Switches and their attached SIPs. This can be a previously created OU, or one created specifically for this purpose but it must be unique among all OU objects in the Group Container domain. Next, choose an attribute within the LDAP directory to be used to contain discretionary access control information. This should be a previously unused attribute that is capable of storing a string value. (The default is the "info" attribute of the Group Object.) Finally, you will need to enter the location for the Group Container, the Group Container Domain and the Access Control Attribute in the blanks provided in the Global - Authentication window. For more detailed descriptions of the Authentication panel fields, see Table 9-1. To access the Authentication panel in the on-board web interface: Click the Configure tab, then click Remote Console Switch - Authentication. LDAP Feature for the Remote Console Switch 184

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280

LDAP Feature for the Remote Console Switch
184
Configuring the LDAP Authentication Parameters
The
Authentication
panel allow you to configure your authentication and
authorization configuration parameters. You can send the username,
password, and other information to the Remote Console Switch, which then
uses LDAP to retrieve data from the Directory Service in order to determine
what permissions the user has.
Enabling LDAP Authentication
The
Authentication Settings
field allows you to choose Local or LDAP
Authentication. Click the
Use LDAP Authentication
checkbox to
authenticate against the LDAP-enabled directory service.
Once LDAP is enabled, the RCS and Root Domains should be designated in
the provided fields.
Entering Authentication Parameters
If you plan to install the Dell Extended Schema, enter only the RCS and Root
Domains that will be used.
If you elect not to use the Dell Extended Schema, the RCS Switches and
access controlled SIPs in your installation will be configured as Computer
Objects within Active Directory. To do this, you will first need to configure an
Organizational Unit to hold group objects that relate users to access
controlled Remote Console Switches and their attached SIPs. This can be a
previously created OU, or one created specifically for this purpose but it must
be unique among all OU objects in the Group Container domain.
Next, choose an attribute within the LDAP directory to be used to contain
discretionary access control information. This should be a previously unused
attribute that is capable of storing a string value. (The default is the “info”
attribute of the Group Object.)
Finally, you will need to enter the location for the
Group Container
, the
Group Container Domain
and the
Access Control Attribute
in the blanks
provided in the
Global - Authentication
window.
For more detailed descriptions of the Authentication panel fields, see Table
9-1
.
To access the
Authentication
panel in the on-board web interface:
Click the
Configure
tab, then click
Remote Console Switch - Authentication
.