User`s manual

_____________________________________________________________________
724-746-5500 | blackbox.com Page 128
9.1.4 LDAP authentication
Perform the following procedure to configure the LDAP authentication method to use whenever the
console server or any of its serial ports or hosts is accessed:
 Select Serial and Network: Authentication and check LDAP or LocalLDAP or LDAPLocal or
LDAPDownLocal
 Enter the Server Address (IP or host name) of the remote Authentication server. Multiple
remote servers may be specified in a comma-separated list. Each server is tried in succession.
 Enter the Server Password.
Note To interact with LDAP requires that the user account exist on our console server to work with the
remote server. (You can't just create the user on your LDAP server and not tell the console server
about it.) You need to add the user account.
 Click Apply. LDAP remote authentication will now be used for all user access to console server
and serially or network attached devices.
LDAP The Lightweight Directory Access Protocol (LDAP) is based on the X.500 standard, but is
significantly simpler and more readily adapted to meet custom needs. The core LDAP
specifications are all defined in RFCs. LDAP is a protocol used to access information stored in an
LDAP server. You can find further information on configuring remote RADIUS servers at the
following sites:
http://www.ldapman.org/articles/intro_to_ldap.html
http://www.ldapman.org/servers.html
http://www.linuxplanet.com/linuxplanet/tutorials/5050/1/
http://www.linuxplanet.com/linuxplanet/tutorials/5074/4/
9.1.5 RADIUS/TACACS User Configuration
Users may be added to the local console server appliance. If they are not added and they log in via
remote AAA, a user will be added for them. This user will not show up in the Black Box configurators
unless they are specifically added, at which point they are transformed into a completely local user. The
newly added user must authenticate from the remote AAA server, and will have no access if it is down.