Brocade Network Advisor IP User Manual v12.3.0 - Manual (Page 545)

Brocade Network Advisor IP User Manual 493
53-1003153-01
AAA Settings tab
13
• LDAP Authorization

Use to assign roles and AORs to user groups and not to individual users.

When roles and AORs are assigned to a group, all AD users in the group can obtain the
roles and AORS assigned to the group. To assign roles and AORs to an AD Group, refer
“Assigning roles and AORs to an AD group” on page 506.
You do not need to create users in the local database.
11. Click Apply to save the configuration.
To display the authentication audit trail, refer to “Displaying the client authentication audit
trail” on page 499.
12. Click Close to close the Server Management Console.
Confirm authentication and authorization by logging into the Management application server
(refer to
“Logging into a server from the server machine” on page 3).
Configuring an LDAP server
To add or edit a LDAP server, complete the following steps.
1. Select the AAA Settings tab.
2. Select LDAP Server from the Primary Authentication list.
3. Choose one of the following options:
• Click Add.
• Select an existing LDAP server and click Edit.
The Add or Edit LDAP Server dialog box displays ( Figure 203 ).
FIGURE 203 Add or Edit LDAP server
4. Enter the LDAP server’s hostname in the Network address field.
If DNS is not configured in your network, provide an IP address instead of the hostname.
5. Enable security by selecting the Security Enabled check box.
When you enable security, the TCP port number automatically changes to port 636 and you
must enable certificate services on the LDAP server.
6. Enter the TCP port used by the LDAP server in the TCP Port field.
Default is 389 if security is not enabled. Default is 636 if security is enabled.
7. Enter the timeout timer value (in seconds) that specifies the amount of time to wait between
retries when the server is busy in the Timeout (Sec) field.