Brocade Network Advisor SAN User Manual v12.3.0 - Manual (Page 499)

Brocade Network Advisor SAN User Manual 447
53-1003154-01
LDAP server configuration
11
2. Change the attribute to use the sequence number 9 as follows.
ATTRIBUTE NM-Roles-AORs-List 9 string
3. Save and close the file.
4. Open the Radius server dictionary file in a text editor (such as Notepad).
5. Enter the following to add the Management application dictionary file to the Radius server
dictionary file:
$INCLUDE dictonary.NM_AAA_dictionary
6. Save and close the file.
LDAP server configuration
NOTE
You must have User Management Read and Write privileges to map roles and AORs to Active
Directory (AD) groups.
NOTE
You must configure a Lightweight Directory Access Protocol (LDAP) server as the primary
authentication server and set Authentication Server Groups as the authorization preference (refer
to
“Configuring LDAP server authentication” on page 435).
Authentication Server Groups enable you to configure user access rights to AD groups (including
users, contacts, computers, and other AD groups) by assigning roles and AORs to groups in the
Management application. LDAP provides user authentication and authorization using the AD
service in conjunction with LDAP on the switch.
1. “Creating an AD user account” on page 447 (LDAP server)
2. “Assigning an AD user to an AD group” on page 448 (LDAP server)
3. “Defining user accounts on the external LDAP server” on page 448 (LDAP server)
4. “Assigning roles and AORs to an AD group” on page 451 (Management application server)
Creating an AD user account
To create a new user account in Active Directory Users and Computers, complete the following
steps. For more information, click F1 for help or refer to www.microsoft.com.
1. Open the Active Directory Users and Computers console.
For example, on Windows 2008-R2, select Start > Administrative Tools > Active Directory Users
and Computers.
The Active Directory Users and Computers dialog box displays.
2. Right-click the Users folder and select New > User.
The New Object - User dialog box displays.
3. Enter a name in the First name field.
It is recommended that you use similar names for the First name and User logon name fields.