Fujitsu Control 4 Serie Guia Del Usuario página 75

5. LDAP
• Group objects are Active Directory objects that can contain users,
computers, contacts and other groups. Group Container is used when
Query Mode is set to Group Attribute. Each group object, in turn, is
assigned members to associate with a particular access level for
member objects (people, appliances, and target devices). The access
level associated with a group is configured by setting the value of an
attribute in the group object.
• For example, if the Notes property in the group objects list is used to
implement the access control attribute, the Access Control Attribute field
on the LDAP Query Page should be set to info. Setting the Notes
property to KVM User Admin causes the members of that group to have
user administration access to the appliances and target devices that are
also members of that same group.
• The Notes property is used to implement the access control attribute. The
value of the Notes property, available in group and user objects shown in
Active Directory Users and Computers (ADUC), is stored internally in the
directory, in the value of the info attribute. ADUC is a Microsoft Management
Console snap-in for configuring Active Directory. It is started by selecting
Start > Programs > Administrative Tools > Active Directory Users and
Computers. This tool is used to create, configure and delete objects such as
users, computers and groups. See "Appliance and target device query
modes" on page 71 for more information.
• The Group Container Mask field defines the object type of the Group
Container, which is normally an organizational unit. The default value is
"ou=%1".
• The Target Mask field defines a search filter for the target device. The default
value is "cn=%1".
• The Access Control Attribute field specifies the name of the attribute that is
used when the query modes are set to User Attribute or Group Attribute. The
default value is info.
To configure LDAP query parameters:
1. Select Appliance - Appliance Settings - User Accounts - LDAP Accounts -
Query.
2. Select either Basic, User Attribute or Group Attribute for the Appliance Query
Mode and the Target Device Query Mode.
70
590-1058-640A