Dell PowerConnect W Clearpass 100 Software 3.7 Deployment Guide - Page 119

Changing Operator Passwords To change the password for an operator, edit the operator login and type a new password in the "Operator Password" and "Confirm Password" password fields. You may also want to select "Force a password change on their next login" under Password Options to allow the operator to select a new password. Operators can change their own passwords by navigating to Home > Change Password, entering a new password into the Change Password form, then clicking the Set Password button to save your new password. LDAP Operator Authentication Operators defined externally in your company's directory server form the second type of Amigopod operator. Authentication of the operator is performed using LDAP directory server operations. The attributes stored for an authenticated operator are used to determine what operator profile should be used for that user. The Manage LDAP Server and the LDAP Translation Rules commands allow you to set up Amigopod operator logins integrated with a Microsoft Active Directory domain or another LDAP server. The operator management features, such as creating and editing operator logins, apply only to local operator logins defined in the Amigopod Visitor Management Appliance. You cannot create or edit operator logins using LDAP. Only authentication is supported. Manage LDAP Servers Aruba Amigopod supports a flexible authentication mechanism that can be readily adapted to any LDAP server's method of authenticating users by name. There are built-in defaults for Microsoft Active Directory servers, POSIX-compliant directory servers and RADIUS servers. When an operator attempts to log in to the Amigopod Visitor Management Appliance, each LDAP server that is enabled for authentication is checked, in order of priority from lowest to highest. Once a server is found that can authenticate the operator's identity (typically with a username and password), the LDAP server is queried for the attributes associated with the user account. These LDAP attributes are then translated to Amigopod operator attributes using the rules defined in the LDAP translation rules. In particular, an Amigopod operator profile will be assigned to the authenticated user with this process, which controls what that user is permitted to do. Creating an LDAP Server An LDAP server is created by navigating to the Administrator > Operator Logins > Servers window, then clicking the Create a new LDAP server icon link. This opens the following window. Amigopod 3.7 | Deployment Guide Operator Logins | 119