Management and Configuration Guide (Includes ACM xl) 2005-12

4-22 ProCurve Secure Access 700wl Series Management and Configuration Guide
Configuring Rights
Group membership can be retrieved in one of two ways:
• If the LDAP database contains individual records for each MAC address user, an attribute in those
records can define the groups to which the MAC address belongs.
• Records can be used to represent groups, each of which contains a set of MAC addresses that are
members of that group.
Specifying an LDAP Service for MAC Address Retrieval
To set up MAC address retrieval from an LDAP service, do the following:
Step 1. From the main Identity Profiles page, click the MAC Address Retrieval link.
The MAC Address Retrieval page appears.
Figure 4-10 shows the MAC Address Retrieval page with several LDAP services that can be used
for MAC address retrieval.
Figure 4-10. MAC Address Retrieval, Selecting an LDAP Service
If there are any LDAP services configured that meet the requirements for use with this feature
(specifically, they are set for non-user binding) they are displayed in the list. If there are no services in
this list, you must configure at least one in order to use this feature.
Note:
If you have an LDAP service configured for user binding, that service does not appear in this list.
» To configure or change the settings for MAC address retrieval, click the configuration icon at the
end of the row. You must configure the service for MAC address retrieval before you can enable it for
retrieval.
» To select an LDAP service to use as the source of MAC Address users, click the check box next to the
service name. The check box is enabled once you configure the service for MAC address retrieval.
» To configure an LDAP service, or to modify a service configuration, see “Configuring Authentication
Services” on page 5-7 in Chapter 5, “Configuring Authentication”.