HP Intelligent Management Center v5.1 TACACS+ Authentication Manager Administrator Guide

13
Figure 10 Recommended LDAP authentication and TAM local authorization configuration procedure
Configuring an LDAP server
Create device user data.
A device user is a network maintainer that uses account name and password to log in to manage a
device.
Configuring TAM
HP recommends that you configure TACACS+ authentication and authorization by following this order:
1. Add a device.
2. Add an authorization scenario.
3. Add authorization command.
4. Add an authorization policy.
5. Add an LDAP user.
6. Add an LDAP synchronization policy.
Adding a device
A device can cooperate with TAM to implement TACACS+ authentication and authorization only when
the device is added to TAM.
HP recommends that you first add devices to TAM because:
• Device is an element in an authorization scenario. Adding devices is a must to configure an
authorization scenario.
• Different devices might use different command sets. After you add a device, you can configure a
command set for the device.
To enter the page for configuring devices, select Service > TACACS+ AuthN Manager > Device List. See
Figure 11. For more information, see "Performing device-related configuration."