Authentication dialog box

You can use the Authentication dialog box to configure the management server to communicate with your authentication server and authenticate remote users in the authentication server.

Enable Remote Authentication

This area allows you to enable or disable remote authentication. You can enable remote authentication to enable the management server to authenticate remote users within the configured authentication servers.

Authentication Service

Enables you to configure the management server to authenticate users in directory service providers, such as Active Directory, OpenLDAP, or specify your own authentication mechanism. You can specify an authentication service only if you have enabled remote authentication.

Active Directory

Administrator Name
Specifies the administrator name of the authentication server. The name must include the domain name and user name. For example, domain\admin.
Password
Specifies the password to access the authentication server.
Base Distinguished Name
Specifies the location of the remote users in the authentication server. For example, if the domain name of the authentication server is ou@domain.com, then the base distinguished name is dc=ou,dc=domain,dc=com.

OpenLDAP

Bind Distinguished Name
Specifies the bind distinguished name that is used along with the base distinguished name to find remote users in the authentication server.
Bind Password
Specifies the password to access the authentication server.
Base Distinguished Name
Specifies the location of the remote users in the authentication server. For example, if the domain name of the authentication server is ou@domain.com, then the base distinguished name is dc=ou,dc=domain,dc=com.

Others

Bind Distinguished Name
Specifies the bind distinguished name that is used along with the base distinguished name to find remote users in the authentication server that you have configured.
Bind Password
Specifies the password to access the authentication server.
Base Distinguished Name
Specifies the location of the remote users in the authentication server. For example, if the domain name of the authentication server is ou@domain.com, then the base distinguished name is dc=ou,dc=domain,dc=com.
Version
Specifies the Lightweight Directory Access Protocol (LDAP) version that is supported by your authentication server. You can specify whether the protocol version must be automatically detected or set the version to 2 or 3.
User Name Attribute
Specifies the name of the attribute in the authentication server that contains user login names to be authenticated by the management server.
Group Membership Attribute
Specifies a value that assigns the management server group membership to remote users based on an attribute and value specified in the user's authentication server.
UGID
If the remote users are included as members of a GroupOfUniqueNames object in the authentication server, this option enables you to assign the management server group membership to the remote users based on a specified attribute in that GroupOfUniqueNames object.
Member
Specifies the attribute name that your authentication server uses to store information about the individual members of a group.
User Object Class
Specifies the object class of all users in the remote authentication server.
Group Object Class
Specifies the object class of all groups in the remote authentication server.

Note: If you want to modify the authentication service, you must first delete any existing authentication servers and add new authentication servers.

Servers

This area displays the authentication servers that the management server communicates with to find and authenticate remote users. The credentials for remote users or groups are maintained by the authentication servers.

Command buttons

Enables you to add, edit, or delete authentication servers.

Add
Displays the Add Server dialog box for adding an authentication server. You specify the name or IP address of the server and the port number.

If the authentication server that you are adding is part of an high-availability pair (using the same database), you can also add the partner authentication server. This enables the management server to communicate with the partner when one of the authentication servers is unreachable.
Edit
Displays the Edit Server dialog box for editing the settings for an authentication server. You can edit the name or IP address of the server and the port number.
Remove
Deletes the selected authentication servers.

Name or IP Address

Displays the host name or IP address of the authentication server that is used to authenticate the user on the management server.

Port

Displays the port number of the authentication server.

Test Authentication

This area enables you to test your configuration.

Test

Validates the configuration of your authentication server by authenticating a remote user or group.

While testing, if you specify only the user name, the management server searches for the remote user in the authentication server, but does not authenticate the user. If you specify both the user name and password, the management server searches and authenticates the remote user.

You cannot test the authentication if remote authentication is disabled.