User authentication LDAP
IX20 User Guide
908
LDAP user configuration
When configured to use LDAPsupport, the IX20 device usesa remote LDAPserver for user
authentication (password verification) and authorization (assigning the accesslevel of the user).
Additional LDAPservers can be configured as backup servers for user authentication.
This section outlineshow to configure a LDAPserver to beused for user authentication on your IX20
device.
There are several different implementationsof LDAP, including Microsoft ActiveDirectory. This section
uses OpenLDAPas an example configuration. Other implementationsof LDAPwill have different
configuration methods.
Example OpenLDAP configuration
With OpenLDAP, users can be configured in a text file using the LDAPData Interchange Format (LDIF).
In this case, wewill be using a file called add_user.ldif.
1. Create the add_user.ldif file in a text editor. For example:
$ gedit ./add_user.ldif
2. Add users to the file using the following format:
dn: uid=john,dc=example,dc=com
objectClass: inetOrgPerson
cn: John Smith
sn: Smith
uid: john
userPassword: password
ou: admin serial
n
The value of uid and userPassword must correspond to the username and password
used to log into the IX20 device.
n
The ou attribute is optional. If used, the value must correspond to authentication
groupsconfigured on your IX20. Alternatively, if the user isalso configured as a local
user on the IX20 device and the LDAPserver authenticates the user but does not return
any groups, the local configuration determines the list of groups. See Authentication
groupsfor more information about authentication groups.
Other attributes may be required by the user’s objectClass. Any objectClassmay be used as
long it allowsthe uid, userPassword, and ou attributes.
3. Save and close the file.
4. Add the user to the OpenLDAPserver:
$ ldapadd -x -H 'ldap:///' -D 'cn=admin,dc=example,dc=com' -W -f add_
user.ldif
adding new entry "uid=john,dc=example,dc=com"
5. Verify that the user has been added by performing an LDAPsearch:
$ ldapsearch -x -LLL -H 'ldap:///' -b 'dc=example,dc=com'
uid=john
dn: uid=john,dc=example,dc=com
objectClass: inetOrgPerson
To Next Page
Loading...
Need help?
General