Users Guide

a. If you have selected the directory type as AD, enter the following details:
● Server Port number—The server port number can be between 1 and 65535
● Network Timeout and Search Timeout in seconds
● Select the Certificate Validation checkbox
● Click Select a file to browse and upload a certificate
b. If you have selected the directory type as LDAP, enter the following details:
● Server Port number—The server port number can be between 1 and 65535
● Base Distinguished Name to Search
● Attribute of User Login, Attribute of Group Membership, and Search Filter
● Network Timeout and Search Timeout in seconds
● Select the Certificate Validation checkbox
● Click Select a file to browse and upload a certificate
NOTE: If the Certificate Validation check box is selected, enter the FQDN of the domain controller in the Method
field. The certificate validation is successful only if the details of the Issuing Authority in the certificate and the
FQDN match.
Deleting directory services
To delete directory services:
1. From the main menu, click Application Settings > Users > Directory Services.
2. Select the directory service that you want to delete and click Delete.
Configuring login security settings
OME–Modular supports IP range-based access restriction. You can restrict access to only a specified range of IP addresses.
You can also configure lockout policies that enforce delays after certain number of failed login attempts.
Configuring login IP range
1. Click Application Settings > Security > Login IP Range.
2. Select Enable IP Range.
3. Enter the IP range in the CIDR format.
For IPv4, enter the IP address in the format—192.168.100.14/24. For IPv6, enter the IP address in the format—
2001:db8::/24.
Configuring login lockout policy
1. Click Application Settings > Security > Login Lockout Policy.
2. Select By User Name to enable user account-based lockout. Select By IP Address to enable IP address-based lockout.
3. Enter the lockout details:
a. Lockout Fail Count: The number of failed login attempts. Valid values are between 2 and 16.
b. Lockout Fail Window: The time within which subsequent failed logins are registered. Valid time is between 2 seconds and
65,535 seconds.
c. Lockout Penalty Time: Time for which the logins are restricted. Valid time is between 2 seconds and 65,535 seconds.
If the IP is still unavailable, ensure that:
● The network cable is connected.
● If DHCP is configured, ensure that the cable is connected to a ToR switch that has connectivity to the DHCP server.
50
Logging in to OME-Modular