Opengear ACM5000 - Remote Groups with LDAP Authentication

Chapter 9: Authentication
198 Console Server & RIM Gateway User Manual
TomFraser
AmandaJones
FredWhite
JanetLong
Cleartext-Password := ”FraTom70”
Framed-Filter-Id=”:group_name=admin:”
Cleartext-Password := ”JonAma83”
Cleartext-Password := ”WhiFre62”
Framed-Filter-Id=”:group_name=testgroup1,users:”
Cleartext-Password := ”LonJan57”
Framed-Filter-Id=”:group_name=admin:”
 Additional local groups such as testgroup1 can be added via Users & Groups: Serial & Network
9.1.8 Remote groups with LDAP authentication
Unlike RADIUS, LDAP has built in support for group provisioning, which makes setting up remote groups easier. The
console server will retrieve a list of all the remote groups that the user is a direct member of, and compare their names
with local groups on the console server.
Note: Any spaces in the group name will be converted to underscores.
For example, in an existing Active Directory setup, a group of users may be part of the “UPS Admin” and “Router Admin”
groups. On the console server, these users will be required to have access to a group “Router_Admin”, with access to
port 1 (connected to the router), and another group “UPS_Admin”, with access to port 2 (connected to the UPS). Once
LDAP is setup, users that are members of each group will have the appropriate permissions to access the router and
UPS.