This section provides an LDAP example for illustrating the configuration procedure using Microsoft Active
Directory
®
(AD). To configure LDAP authentication, four main steps are required:
a. Determine user accounts and roles (groups) intended for the Legrand PDU
b. Create user groups for the Legrand PDU on the AD server
c. Configure LDAP authentication on the Legrand PDU
d. Configure roles on the Legrand PDU
Important: Legrand disables SSL 3.0 and uses TLS due to published security vulnerabilities in SSL 3.0. Make
sure your network infrastructure, such as LDAP and mail services, uses TLS rather than SSL 3.0.
In This Chapter
Step A. Determine User Accounts and Roles ...................................... 467
Step B. Configure User Groups on the AD Server ............................... 467
Step C. Configure LDAP Authentication on the Legrand PDU............. 468
Step D. Configure Roles on the Legrand PDU..................................... 469
Step A. Determine User Accounts and Roles
Determine the user accounts and roles (groups) that are authenticated for accessing the Legrand PDU. In
this example, we will create two user roles with different permissions. Each role (group) will consist of two
user accounts available on the AD server.
User roles
User accounts (members)
usera
PX_User
pxuser2
userb
PX_Admin
pxuser
Group permissions:
The PX_User role will have neither system permissions nor outlet permissions.
The PX_Admin role will have full system and outlet permissions.
Step B. Configure User Groups on the AD Server
You must create the groups (roles) for the Legrand PDU on the AD server, and then make appropriate users
members of these groups.
In this illustration, we assume:
The groups (roles) for the Legrand PDU are named
PX_Admin
and
PX_User
.
User accounts
pxuser
,
pxuser2
,
usera
and
userb
already exist on the AD server.
To configure user groups on the AD server:
1. On the AD server, create new groups --
PX_Admin
and
PX_User
.
LDAP Configuration
Illustration
