System information

Setting User Permissions for LDAP or Active
Directory Authentication
After selecting either LDAP or Active Directory authentication method,
you will need to set the user permissions in order for the n-Command
®
MSP permissions to be retrieved correctly. This function should be
performed by an administrator familiar with the LDAP or Active Directory
methods used in your network.
Use one of the following two methods to set the user permissions in n-
Command MSP:
1. Add the adtranMSPPermissions attribute to the user record. The
adtranMSPPermissions defines permissions over multiple values
or lists them in a comma-separated list. The permission values
must be selected from the list in the table below.
2. Add the memberOf attribute to the user entry. The memberOf
attribute contains multiple values and is not case sensitive. Each
value of the memberOf attribute can only contain the DN of a
group record that represents an n-Command MSP permission. The
group CN must be one of the values listed in the table below. The
memberOf attribute may be generated automatically by your LDAP
server when a user record is assigned to a group on the system.
Attribute User Permission
adtranMSPAll All permissions
adtranMSPRestore Restore device configurations
adtranMSPReboot Reboot devices
adtranMSPPushConfig Push configurations to devices
adtranMSPPushFirmware Push firmware to devices
adtranMSPDiscover Discover devices on the network
adtranMSPPurgeExcept Purge exceptions on devices
adtranMSPManageUser
Manage users on the n-Command
server
adtranMSPManageServer Manage the n-Command server
ADTRAN n-Command MSP v6.1 Help
61700841G1-1A