Chapter 3: Accessing the PM PDU via the Web Manager 29
Authentication
Authentication can be performed locally, with OTP, or on a remote Kerberos, LDAP, NIS, Radius
or TACACS+ authentication server. If the PM PDU is managed by a DSView 3 server, DSView 3
authentication is also supported. The PM PDU also supports remote group authorizations for the
LDAP, Radius and TACACS+ authentication methods.
Fallback mechanisms of the following types are available:
Local authentication
can be tried first, foll
owed by remote, if the local authentication fails (Local/
Remote_Method)
-or-
Remote authentication may be tried first, followed by local (Remote_Method/Local)
-or-
Local authentication may be tried only if a remote authentication
server is down
(Rem
ote_Method_Down_Local).
An administrator can configure authentication using the CLI utility and the Web Manager. The
default aut
hentication method for the PM PDU is Local. Any authentication method that is
configured for the PM PDU is used for authentication of any user who attempts to log in through
Telnet, SSH or the Web Manager.
Appliance authentication
Select Appliance Authentication to configure the authentication method used to log in to the PM
PDU with access to all allowed operations in the appliance, PDUs and outlets.
To set authentication for the PM PDU:
1. Click Authent
ication - Appliance Authentication.
2. Select the desired authentication server from the Authentication Type drop-down menu.
3. Click Save.
Authentication servers
When using an authentication server, you must configure its IP address and in most cases other
parameters before it can be used. The following authentication servers require configuration:
RADIUS, TACACS+, LDAP(S)|AD, Kerberos, NIS and DSView 3 servers.
To configure a RADIUS authentication server:
1. Select Authen
tication - Authentication Servers - RADIUS.
2. Enter the IP addresses of the First Authentication Server and First
Accounting Server.
3. If used, enter the IP addresses for the Second Authentication Server and Second
Accounting
Server.