Cooper M3000 Betriebsanweisung PDF herunterladen (Seite 88)

2-48 SPARC Enterprise Mx000 Servers XSCF User’s Guide • December 2010

2.2.4 Active Directory Administration

Active Directory administration is used to specify items relating to Active Directory clients.

The Active Directory server, loading of server certificate, group name, privileges, user

domain, log, DNS locator query, and so on are set. In the Active Directory server, the XSCF

user information is managed.

Note – This section does not cover Active Directory configuration and administration. An

administrator who is familiar with Active Directory should perform the Active Directory

design.

TABLE 2-7 lists terms used in Active Directory Administration.

Active Directory provides both authentication of user credentials and authorization of the

user access level to networked resources. Active Directory uses authentication to verify the

identity of users before they can access system resources, and to grant specific access

privileges to users in order to control their rights to access networked resources.

User privileges are either configured on XSCF or learned from a server based on each user's

group membership in a network domain. A user can belong to more than one group. User

domain is the authentication domain used to authenticate a user. Active Directory

authenticates users in the order in which the users' domains are configured.

Once authenticated, user privileges can be determined in the following ways:

■ In the simplest case, user’s privileges are determined directly through the Active

Directory configuration on the XSCF. There is a defaultrole parameter for Active

Directory. If this parameter is configured or set, all users authenticated via Active

Directory are assigned privileges set in this parameter. Setting up users in an Active

Directory server requires only a password with no regard to group membership.

■ If the defaultrole parameter is not configured or set, user privileges are learned from the

Active Directory server based on the user’s group membership. On XSCF, the group

parameter must be configured with the corresponding group name from the Active

TABLE 2-7 Active Directory Administration Terms

Term Description

Active Directory Active Directory is a distributed directory service from Microsoft Corporation.

Like an LDAP directory service, it is used to authenticate users.

User domain User domain is the authentication domain used to authenticate a user.

DNS locator query The query is used to query DNS server to determine the Active Directory server

to use for user authentication.

1 2 ... 83 84 85 86 87 88 89 90 91 92 93 ... 431 432

Keine Kommentare

Cooper M3000 Betriebsanweisung Seite 88