Raritan Engineering Command Center CC-SG ユーザーズマニュアル
114 C
OMMAND
C
ENTER
S
ECURE
G
ATEWAY
A
DMINISTRATOR
G
UIDE
Establish Order of Authentication Databases
The General properties allow you to set the order of your authentication databases. If the first
checked option is unavailable, CC-SG will try the second, then the third, and so on, until it is
successful.
1. On the Setup menu, click Security Manager. When the Security Manager screen appears,
checked option is unavailable, CC-SG will try the second, then the third, and so on, until it is
successful.
1. On the Setup menu, click Security Manager. When the Security Manager screen appears,
click on the General tab.
Figure 138 Security Manager General Screen
2. The modules in the table represent the multiple authentication options available in CC-SG.
Select a name from the Authentication Modules table and click Up and Down to prioritize
the sequence of engagement.
the sequence of engagement.
3. Check the box under the Authentication column to use a selected module for user
authentication.
4. If the selected module is an Active Directory server or the CC Local Database, check the
box under the Authorization column to use that module for user authorization as well.
5. Click Update to update the changes.
6. Click Close to close the Security Manager screen.
6. Click Close to close the Security Manager screen.
Distinguished Names for LDAP and Active Directory
Configuration of remotely authenticated users on LDAP or Active Directory servers requires
entering user names and searches in Distinguished Name (DN) format. The full DN format is
described in
entering user names and searches in Distinguished Name (DN) format. The full DN format is
described in
. For the purposes of this document, you need to know how to enter DNs
and in what order they should be listed. For example, specifying a DN for Active Directory would
be as follows:
be as follows:
common name (cn), organizational unit (ou), domain component (dc)
Specifying a DN for Netscape LDAP and eDirectory LDAP would be as follows:
user id (uid), organizational unit (ou), organization (o)
Username
When authenticating CC-SG users on an Active Directory server by specifying
cn=administrator,cn=users,dc=xyz,dc=com in username, if a CC-SG is associated with an
imported AD group, they will be granted access with these credentials. Note that you can specify
more than one common name, organizational unit, and domain component.
cn=administrator,cn=users,dc=xyz,dc=com in username, if a CC-SG is associated with an
imported AD group, they will be granted access with these credentials. Note that you can specify
more than one common name, organizational unit, and domain component.