Users Guide

Adding Objects To Association Object
Using the Association Object Properties window, you can associate users or user groups, privilege objects, and RAC devices or RAC
device groups. If your system is running on Microsoft Windows 2000 operating system or later version, use Universal Groups to span
domains with your user or RAC objects.
You can add groups of Users and RAC devices.
Adding Users Or User Groups
To add users or user groups:
1 Right-click the Association Object and select Properties.
2 Select the Users tab and click Add.
3 Enter the user or user group name and click OK.
Adding Privileges
To add privileges:
1 Select the Privileges Object tab and click Add.
2 Enter the privilege object name and click OK.
Click the Privilege Object tab to add the privilege object to the association that denes the user’s or user group’s privileges when
authenticating to an RAC device. Only one privilege object can be added to an Association Object.
Adding RAC Devices Or RAC Device Groups
To add RAC devices or RAC device groups:
1 Select the Products tab and click Add.
2 Enter RAC devices or RAC device group name and click OK.
3 In the Properties window, click Apply and click OK.
Click the Products tab to add one or more RAC devices to the association. The associated devices specify the RAC devices
connected to the network that are available for the dened users or user groups. Multiple RAC devices can be added to an Association
Object.
Conguring Active Directory With Extended Schema Using CMC Web
Interface
To congure Active Directory with extended schema using CMC web interface:
NOTE
: For information about the various elds, see the Online Help .
1 In the left pane, click, Chassis Overview > User Authentication > Chassis Overview > Directory Services.
2 Select Microsoft Active Directory (Extended Schema).
The settings to be congured for extended schema is displayed on the same page.
3 In the Common Settings section, specify the following:
• Select Enable Active Directory and enter the timeout value for Active Directory in the AD Timeout eld.
• To obtain the Active Directory Domain Controllers from a DNS lookup select Look Up Domain Controllers with DNS, and then
select one of the following:
– User Domain from Login — to perform the DNS lookup with the domain name of the login user.
Conguring
User Accounts and Privileges 143