Opengear ACM7000 User Manual

Chapter 8: Authentication
178
2. Enter the Server Address (IP or host name) of the remote Authentication / Authorization server.
Multiple remote servers may be specified in a comma separated list. Each server is tried in
succession
3. Session accounting is on by default. If session accounting information is not wanted, check the
Disable Accounting checkbox. (One reason for not wanting session accounting: if the
authentication server does not respond to accounting requests, said request may introduce a
delay when logging in.)
4. In addition to multiple remote servers you can also enter for separate lists of
Authentication/Authorization servers and Accounting servers. If no Accounting servers are
specified, the Authentication/Authorization servers are used instead
5. Enter the Server Password
6. Click Apply. RADIUS remote authentication is used for all user access to console server and
serially or network attached devices
8.1.4 LDAP authentication
LDAP authentication supports OpenLDAP servers, using the Posix style schema for user and group
definitions.
Performing authentication against any LDAP server (AD or OpenLDAP) is straightforward, as they both
follow the common LDAP standards and protocols. The harder part is configuring how to get the extra
data about the users (the groups they are in, etc).
On an Opengear device, we may be configured to look at group information from an LDAP server for
authentication and authorization. This group information is stored in a number of different ways. Active
Directory has one method, and OpenLDAP has two other methods:
• Active Directory: Each entry for a user will have multiple 'memberOf' attributes. Each 'memberOf'
value is the full DN of the group they belong to. (The entry for the user will be of objectClass
"user")
• OpenLDAP / Posix: Each entry for a user must have a 'gidNumber' attribute. This will be an integer
value, which is the user's primary group (eg. mapping to the /etc/passwd file, with the group ID
field). To determine which group this is, we must search for an entry in the directory that has that
group ID, which will give us the group name. (The users are of objectClass "posixAccount", and
the groups are of objectClass "posixGroup").
• OpenLDAP / Posix: Each group entry in the group tree (of objectClass 'posixGroup') may have
multiple 'memberUid' attributes. These represent secondary groups (eg. mapping to the
/etc/groups file). Each attribute would contain a username.

Opengear ACM7000 Specifications

General

RS-232 ports	8
SIM card slot	Yes
USB 2.0 ports quantity	4
Number of simultaneous SIM cards	2
Certification	EN 55022:2010, CISPR 22:2008, FCC Part 15 B:2015, ICES-003 5 (2014), AS/NZS CISPR 22:2009+A1:2010, EN 61000-3-2:2006/A2:2009, EN 61000-3-3:2008 EN 55024:2010, CISPR 24:2010, EN 61000-4-2:2009, EN 61000-4-3:2006+A2:2010, EN 61000-4-4:2004+A1:2010, EN 61000-4-5:2006, EN 61000-4-6:2009, EN 61000-4-8:2010, EN 61000-4-11:2004 CE, UL 1950, TUV, C-Tick, RoHS
Mounting type	Rack mounting
Product color	Black, Red
Antenna connector type	SMA
Flash memory	32 MB
Internal memory	256 MB
Processor frequency	800 MHz
Control display unit	No
Internal memory type	DDR3
Input voltage	110 - 240 V
DC input voltage	12 V
Storage temperature (T-T)	-40 - 75 °C
Operating temperature (T-T)	-25 - 60 °C
Operating relative humidity (H-H)	5 - 90 %
Security algorithms	IPSec, SSH-2, SSL/TLS

Weight and Dimensions

Depth	120 mm
Width	130 mm
Height	35 mm
Weight	6000 g