Cyclades AlterPath BladeManager Manuál s instrukcemi stáhnout pdf (Strana 150)

136 MergePoint 5224/5240 Service Processor Manager Installer and Administrator Guide

SYNTAX 1.3.6.1.4.1.1466.115.121.1.12)

# Standard object classes from RFC2256

# RFC 2377

objectclass ( 1.3.6.1.1.3.1 NAME 'uidObject'

DESC 'RFC2377: uid object'

SUP top AUXILIARY MUST ( uid $ memberof) )

2. On the server, configure the group(s) assigned to each user with one entry for each group,

either in a user definition file in the /etc/openldap directory, as shown in the following

example, or on the command line.

dn: cn=<username>,dc=qa,dc=<domain>,dc=com

uid: <username>

cn: <username>

...

memberof: cn=<Group1>,dc=<domain>,dc=<domain>,dc=com

memberof: cn=d<Group2>,dc=<domain>,dc=<domain>,dc=com

memberof: cn=<Group3>,dc=<domain>,dc=<domain>,dc=com

...

homeDirectory: /home/<username>

NOTE: To give a user administrative access to the SP manager, assign the admin group name in a

memberof definition.

Configuring group authorization for RADIUS authentication

The two tasks listed below must be done to configure groups for RADIUS authentication.

• The RADIUS server’s administrator must define the desired groups and assign users to

the groups.

See To configure groups on a RADIUS authentication server: on page 137.

• The SP manager’s administrator must configure the RADIUS server on the SP manager.

The following list defines the values to define when configuring a RADIUS authentication

server on the SP manager as shown below.

auth1 server[:port] secret [time-out] [retries]

acct1 server[:port] secret [time-out] [retries]

1 2 ... 145 146 147 148 149 150 151 152 153 154 155 ... 239 240

Žádné komentáře

Cyclades AlterPath BladeManager Manuál s instrukcemi Strana 150