This section provides an LDAP example for illustrating the configuration procedure using Microsoft Active
Directory
®
(AD). To configure LDAP authentication, four main steps are required:
a. Determine user accounts and roles (groups) intended for the Legrand PDU
b. Create user groups for the Legrand PDU on the AD server
c. Configure LDAP authentication on the Legrand PDU
d. Configure roles on the Legrand PDU
Important: Legrand disables SSL 3.0 and uses TLS due to published security vulnerabilities in SSL 3.0. Make
sure your network infrastructure, such as LDAP and mail services, uses TLS rather than SSL 3.0.
In This Chapter
Step A. Determine User Accounts and Roles ...................................... 431
Step B. Configure User Groups on the AD Server ............................... 431
Step C. Confi
gure LDAP Authentication on the Legrand PDU............. 432
Step D. Configure Roles
on the Legrand PDU..................................... 433
Step A. Determine User Accounts and Roles
Determine the user accounts and roles (groups) that are authenticated for accessing the Legrand PDU. In
this example, we will create two user roles with different permissions. Each role (group) will consist of two
user accounts available on the AD server.
User roles User accounts (members)
usera PX_User
pxuser2
userb PX_Admin
pxuser
Group permissions:
The PX_User role will have neither system permissions nor outlet permissions.
The PX_Admin role will have full system and outlet permissions.
Step B. Configure User Groups on the AD Server
You must create the groups (roles) for the Legrand PDU on the AD server, and then make appropriate users
members of these groups.
In this illustration, we assume:
The groups (roles) for the Legrand PDU are named PX_Admin and PX_User.
User accounts pxuser, pxuser2, usera and userb already exist on the AD server.
To configure user groups on the AD server:
1. On the AD server, create new groups -- PX_Admin and PX_User.
LDAP Configuration
Illustration
To Next Page
Loading...
