Schneider Electric AP561x - Manuals

APC by Schneider Electric LDAP Lab Layout Server1 Server2 Server3 OBWI Client IPKVM1 192.168.5.11 LDAP Server KVMcorp.com 192.168.5.100 192.168.5.50 KVM

APC by Schneider Electric Name the Server Modules via the Local Port OSD From the local OSD, press the Print Scrn key. The Main dialog box appears. Click the name you want to change, and click Modify, rename the server module and click OK. Remember, the server names here must match the computer obje...

APC by Schneider Electric Active Directory Tasks NOTE: In a production environment, work with your IT department to create the console query user account and add the IP KVM switches OU. You need a level of access that enables you to create, delete, modify groups, and add computer objects for interfa...

APC by Schneider Electric Create a user named kvmldap , and assign the password: Password1 Set the Password not to expire Create User to Browse the Directory This is a special user account specifically for LDAP queries instead of using the Admin account

APC by Schneider Electric Log into the Switch Launch your web browser and point it to the IP address of the IP KVM Switch and login with the default Admin user name & PW: apc andapc

APC by Schneider Electric Name the Switch From the Configure screen, select SNMP and name the switch IPKVM1

APC by Schneider Electric Enable LDAP Authentication Click on Authentication under Appliance in the Configuration Menu

APC by Schneider Electric Configure LDAP Search Parameters On the Search Parameters tab, enter the Search DN: cn=kvmldap,cn=users,dc=kvmcorp,dc=com NOTE: The first cn field must match the full name of the user, not the login name. For example, if the user name is John Doe, then cn=John Doe (note the...

APC by Schneider Electric Leave Query Parameter at Basic IMPORTANT: This query mode should be used to test your LDAP configuration only. After the basic LDAP communications configuration is successfully tested, change the query mode because Basic mode gives full administration authorization to all I...

APC by Schneider Electric Test the basic LDAP Authentication Log out of the APC Web Interface and go back to the login prompt. Log in as: kvmldap with the password Password1 (the user you created earlier to browse the network.) It should load the APC Management Page if the switch can communicate to ...

APC by Schneider Electric Basic Summary ● Very basic ● Quick to set up ● All users have administrator rights ● Use the “Search Base” in the “LDAP Parameters” to limit user access by adding an OU such as “MIS” or “Administrators” ● Ideal for smaller customers

All content in this presentation is protected – © 2008 American Power Conversion Corporation Group Based Authentication

APC by Schneider Electric Change LDAP Query to Group After the basic LDAP communication test succeeds, Log off, then log in to the IP KVM switch as apc with apc as the password. Click on ConfigureClick Global>Authentication. On the Query Parameters tab, click Group Attribute for Query Mode (IP KV...

APC by Schneider Electric Group Summary ● Highly granular security ● Port level control ● Attributes set to groups rather than individual users ● Hugely scalable ● Ideal for Enterprise customers

APC by Schneider Electric Conclusion ● LDAP allows you to integrate your KVM with your security infrastructure to provide an easy to use yet powerful management tool to keep your servers up and running