HP 2x1Ex16 HP IP and Server Console Switches G2 User Guide - Page 52

Unit View>Appliance>Appliance Settings>User Accounts>LDAP>Query.

Page 52 highlights

1. Select Unit View>Appliance>Appliance Settings>User Accounts>LDAP>Query. The Appliance LDAP Query page appears. NOTE: The LDAP Search and Query parameters can only be configured if LDAP Authentication is enabled on the LDAP Overview ("Configuring LDAP" on page 49) page. 2. Configure the Query Mode parameters for: o Appliance-Used to authenticate administrators and users attempting to access the console switch itself. o Target Device-Used to authenticate users attempting to access attached target devices. There are three different modes available: o Basic-A username and password query for the user is sent to the directory service. Once verified, the user is given access to the appliance and any attached target devices. o User Attribute-A username, password, and Access Control Attribute query for the user is sent to the directory service. The Access Control Attribute is read from the user object in Active Directory. If no values are found, the user is given no access to the appliance or target devices, unless the user has User Admin privileges to the appliance. o Group Attribute-A username, password, and group query sent to the directory service for an appliance and attached target devices when using Appliance query mode or for a selected target device when using Target Device query mode. If a group is found containing the user and appliance name, the user is given access to either the appliance or target devices when using Appliance query mode. If a group is found containing the user and target device IDs, the user is given access to the selected target device when using Target Device query mode. 3. Configure the Group Configuration parameters: Configuring the console switch 52

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83

Configuring the console switch
52
1.
Select
Unit View>Appliance>Appliance Settings>User Accounts>LDAP>Query.
The Appliance LDAP
Query page appears.
NOTE:
The LDAP Search and Query parameters can only be configured if LDAP Authentication
is enabled on the LDAP Overview ("
Configuring LDAP
" on page
49
) page.
2.
Configure the Query Mode parameters for:
o
Appliance—Used to authenticate administrators and users attempting to access the console switch
itself.
o
Target Device—Used to authenticate users attempting to access attached target devices.
There are three different modes available:
o
Basic—A username and password query for the user is sent to the directory service. Once verified,
the user is given access to the appliance and any attached target devices.
o
User Attribute—A username, password, and Access Control Attribute query for the user is sent to the
directory service. The Access Control Attribute is read from the user object in Active Directory. If no
values are found, the user is given no access to the appliance or target devices, unless the user has
User Admin privileges to the appliance.
o
Group Attribute—A username, password, and group query sent to the directory service for an
appliance and attached target devices when using Appliance query mode or for a selected target
device when using Target Device query mode. If a group is found containing the user and appliance
name, the user is given access to either the appliance or target devices when using Appliance query
mode. If a group is found containing the user and target device IDs, the user is given access to the
selected target device when using Target Device query mode.
3.
Configure the Group Configuration parameters: