Implementing ldap/ldaps, Remote authentication, E 124) – Raritan Computer DOMINION KSX II User Manual

Page 134

Advertising
background image

Chapter 7: User Management

124

Implementing LDAP/LDAPS Remote Authentication

Lightweight Directory Access Protocol (LDAP/LDAPS) is a networking
protocol for querying and modifying directory services running over
TCP/IP. A client starts an LDAP session by connecting to an
LDAP/LDAPS server (through the default TCP port is 389). The client
then sends operation requests to the server, and the server sends
responses in turn.

Reminder: Microsoft

®

Active Directory

®

functions natively as an

LDAP/LDAPS authentication server.

To use the LDAP authentication protocol:

1. Click User Management > Authentication Settings to open the

Authentication Settings page.

2. Select the LDAP radio button to enable the LDAP section of the

page.

3. Click the

icon to expand the LDAP section of the page.

Server Configuration

4. In the Primary LDAP Server field, type the IP address or DNS name

of your LDAP/LDAPS remote authentication server (up to 256
characters). When the Enable Secure LDAP option is selected and
the Enable LDAPS Server Certificate Validation option is selected,
the DNS name must be used to match the CN of LDAP server
certificate.

5. In the Secondary LDAP Server field, type the IP address or DNS

name of your backup LDAP/LDAPS server (up to 256 characters).
When the Enable Secure LDAP option is selected, the DNS name
must be used. Note that the remaining fields share the same settings
with the Primary LDAP Server field. Optional

6. Type of External LDAP Server.

7. Select the external LDAP/LDAPS server. Choose from among the

options available:

 Generic LDAP Server.

 Microsoft Active Directory. Active Directory is an implementation

of LDAP/LDAPS directory services by Microsoft for use in
Windows environments.

8. Type the name of the Active Directory Domain if you selected

Microsoft Active Directory. For example, acme.com. Consult your
Active Directive Administrator for a specific domain name.

Advertising