Aten CC2000 4.0 [343/371] Example 2

Appendix D

329

3. You can check the group definition with LDAP Browser. You should see a

screen similar to the one below:

4. The above example has added a member – cc2000 – to the groups1 group.

To add additional members to the group, edit the file to include them. For

example:

member: cn=cc2000-1,ou=software,dc=aten,dc=com

member: cn=cc2000-2,ou=software,dc=aten,dc=com

Once these procedures are completed, CC2000 users who are authenticated

through the LDAP/LDAPS server, are authorized according to the permissions

assigned to the group.

Example 2

By default, OpenLDAP only supports the Group has Member attribute setting

for the group related schema – this was the setting used in Example 1.

An alternative setting used by other LDAP servers – User has Member Of

attribute – is also supported under OpenLDAP by extending the schema.

In this example, the external server is OpenLDAP on Windows Server 2003,

as shown in the LDAP/LDAPS Settings Example on page 319.

1. Under the CC2000 User Manager tab, select Authentication Services

→

Authentication Servers.

2. Select the OpenLDAP server; then click Group Authorization.

3. Click the User has Member Of attribute radio button.