SonicWALL TZ 190 Manuale Utente

Pagina di 843
User Management
672
SonicOS Enhanced 4.0 Administrator Guide
When using RADIUS or LDAP authentication, if you want to keep the configuration of 
administrative users local to the appliance whilst having those users authenticated by RADIUS/
LDAP, perform these steps:
Step 1
Navigate to the Users > Settings page.
Step 2
Select either the RADIUS + Local Users or LDAP + Local Users authentication method.
Step 3
Click the Configure button.
Step 4
For RADIUS, click on the RADIUS Users tab and select the Local configuration only radio 
button and ensure that the Memberships can be set locally by duplicating RADIUS user 
names
 checkbox is checked.
Step 5
For LDAP, click on the LDAP Users tab and select the User group membership can be set 
locally by duplicating LDAP user names
 checkbox. 
Step 6
Then create local user accounts with the user names of the administrative users (note no 
passwords need be set here) and add them to the relevant administrator user groups.
Preempting Administrators
When an administrator attempts to log in while another administrator is logged in, the following 
message is displayed. The message displays the current administrator’s user name, IP 
address, phone number (if it can be retrieved from LDAP), and whether the administrator is 
logged in using the GUI or CLI.
This window gives you three options:
  •
Continue - Preempts the current administrator. The current administrator is dropped to 
non-config mode and you are given full administrator access.
  •
Non-config - You are logged into the appliance in non-config mode. The current 
administrator’s session is not disturbed.
  •
Cancel - Returns to the authentication screen.