Owners manual

KVM Access Management Software User Manual118
External Authentication Services
Overview
In addition to its own internal Username / Password authentication procedure, KVM ACCESS supports
authentication from external, third party authentication services. If a third party service has been
specified for a user, KVM ACCESS transfers the login information to the appropriate service for
authentication using an encrypted HTTPS (SSL) connection. The KVM ACCESS supports the following
third party external authentication servers: LDAP, Active Directory, RADIUS, TACACS+, and Windows
NT Domain.
Approved Services
The following services have been tested and approved for use with KVM ACCESS:
• AD Server: Microsoft Windows Server 2003
• LDAP: Microsoft Windows Server 2003; OpenLDAP
• RADIUS: Microsoft IAS for Windows Server 2003; FreeRADIUS
• TACACS+: Microsoft Windows Server 2003 (ClearBox)
• Microsoft Windows NT Domain
LDAP/LDAPS - OpenLDAP Setting Example
In this example, the external server uses OpenLDAP; its IP address is 192.168.10.100; its service port is
389, and the server administrator has created a file named: KVMAccessldap.ldif in the OpenLDAP
directory.
– dn: cn=KVM ACCESS,ou=software,dc=apc,dc=com
– objectclass: top
– objectclass: person
– objectclass: organizationalPerson
– cn: KVM ACCESS
–sn: KVM ACCESS
– userPassword: password
The LDAP administrator can check the LDAP definition with LDAP Browser.