Tripp Lite B022-U08-IP Owner's Manual for B022-U08-IP 1U Rack KVM Switch 93327 - Page 46

7. Administration (continued) 7.3.4 ANMS (continued) 8. In the Search DN field, set the distinguished name of the search base (i.e. the domain name where the search starts for the user name). Note: If the Enable Authorization checkbox is not checked, this field must include the entry where the KVM Admin Group is created. Consult the LDAP/S administrator about the appropriate entry for this. 9. In the Admin Group field, key in the group name for KVM administrator accounts. Note: If the Enable Authorization checkbox is not checked, this field is used to authorize accounts that are logging in. Accounts that are in this group have full access rights to the KVM. Accounts that are not in this group have user access rights to the KVM (See the User Management section of this manual for details on account permissions). Consult the LDAP/S administrator about the appropriate entry for this. 10. On the LDAP server, set the access rights for each user (The following sections describe how to configure LDAP/S for use with the KVM switch). LDAP/S Server Configuration To allow authentication and authorization via LDAP or LDAPS, the active directory's LDAP Schema must be extended so that an extended attribute name for the KVM - permission - is added as an optional attribute to the person class. Note: Authentication refers to the identity verification of the person logging into the KVM switch, whereas Authorization refers to the assigning of device permissions. In order to configure the LDAP server, you will have to complete the following procedures: • Install the Windows Support Tools • Install the Active Directory Schema Snap-In • Extend and Update the Active Directory Schema Each of these procedures is described in the following sections: Install the Windows Support Tools 1. On your Windows server CD, open the Support Tools folder. 2. In the right panel of the dialog box that comes up, double click SupTools.msi. 3. Follow along with the Installation Wizard to complete the procedure. Install the Active Directory Schema Snap-In 1. Open a Command prompt. 2. Key in regsvr32 schmmgmt.dll to register schmmgmt.dll on your computer. 3. Open the Start menu. Click Run and key in mmc /a. Click OK. 4. In the File menu of the screen that appears, click Add/Remove Snap-in, and then click Add. 5. Under Available Standalone Snap-ins, double click Active Directory Schema, click Close and then click OK. 6. On the screen you are in, open the File menu and click Save. 7. When prompted where to save, specify the C:\Windows\system32 directory. 8. Key in the filename schmmgmt.msc. 9. Click Save to complete the procedure. Extend and Update the Active Directory Schema - Create a New Attribute 1. Open Control Panel Administrative Tools Active Directory Schema. 2. In the left panel of the screen that comes up, right-click Attributes. 3. Select New Attribute. 4. A warning message appears. Click Continue to bring up the Create New Attribute dialog box. 5. Fill in the dialog box and click OK. The Common Name and LDAP Display Name fields can be populated as B022-U08-IP-AccessRight. The Syntax field should be Unicode String, the Minimum field should be set to 1, and the Maximum field to 255. 46