Owner's Manual

Using the CMC Directory Service 311
To enable the LDAP user to access a specific CMC card, the role group name
and its domain name must be configured on the specific CMC card. You can
configure a maximum of five role groups in each CMC. Table 5-43shows the
privileges level of the role groups and Table 8-1 shows the default role group
settings. Figure 8-5 illustrates configuration of CMC with Generic LDAP.
Figure 8-5. Configuration of CMC with Generic LDAP
Configuring the Generic LDAP Directory to Access CMC
The CMC's Generic LDAP implementation uses two phases in granting
access to a user. Phase 1 begins with user authentication, followed by phase 2
for user authorization.
Role
Group
Role
Group Name
and Domain
Name
Role
Definition
User
Configuration on Generic
LDAP Side
Configuration on
CMC Side