This post is more than 5 years old
10 Posts
1
1153
September 19th, 2012 05:00
SMC Security Configuration
Hi,
I've recently installed SMC in my environment for the first time successfully. we are currently using local user account as standard login. For audit purpose and to enhance the level of security now I want to implement LDAP. Can anyone provide me run through or configuration documentation which will help me to configure, as I've never done this before I'm currently struggling.
0 events found
No Events found!
Sadish1
11 Posts
0
September 19th, 2012 05:00
Hi Kishore ,
you can get the procedure from the help file in the SMC itself ...
Procedure
To configure authentication:
In the Administration panel, under Security, click Configure Authentication to open the Configure Authentication dialog box.
Select the authentication authority to use.
If using LDAP-SSL, click the LDAP-SSL tab and specify values for each of fields. For instructions, refer to the tab's help page.
If using Windows AD/OS, optionally click the Windows AD/OS tab and specify to restrict authentication to domain users of a specific domain group. For instructions, refer to the tab's help page.
Click OK to save your changes.
Add a role for each user in SMC.
Use this tab to configure an LDAP-SSL server.
This tab contains the following elements:
Port — specifies the port to which the server is listening. The default port is 389.
Bind DN — specifies the user login to the LDAP server. To connect to the LDAP-SSL server, you need to use an authorized user's distinguished name and password (Bind DN/Bind Password).
Bind Password — specifies the password for the LDAP server.
User search path — specifies the distinguished name of the node at which to begin user searches.
Group Search Path — specifies the distinguished name of the node at which to begin group searches.
User Object Class — specifies the object class identifying users in the LDAP hierarchy.
Group Object Class — specifies the object class identifying groups in the LDAP hierarchy.
User ID Attribute — specifies the attribute identifying the user ID.
Group Name Attribute — specifies the attribute identifying the group name.
Group Membership Required — indicates whether only users in the specified group are authenticated. Selecting this option enables the accompanying Group Name field.
Group Name — specifies the LDAP group name. Only users in this group are authenticated
before that have your SSL enabled ..
Regards
Sadish S
sauravrohilla
859 Posts
0
September 19th, 2012 06:00
HI Kishore,
Just want to clarify you want to implement Windows AD authentication or LDAP (Using Unix's way of authenticating)? If its just plain simple Windows AD authentication then just add the user or group in SMC's roles as:
D:\username
if its Unix LDAP then you can refer to Sadish's reply
regards,
Saurabh