Draco tera
166 2020-02-26
5.13.8 Active Directory
The KVM matrix can be synchronized with the directory service Active
Directoy with regard to user authentication. This allows the user to login at
the KVM matrix using login information from the Active Directory service
and to contact the Active Directory Server for each authentication that
does in fact the proper authentication.
The connection between KVM matrix and the Active Directory server is
established via OpenLDAP and periodically synchronized every 5 minutes.
The search of users to be synchronized and automatically added to the
KVM matrix configuration can either be based on a group or an
organizational unit (OU). In both cases a user requires to be at least
assigned to one group:
In case of the group, all users belonging to a previously defined group
on the active directory server are added to the KVM matrix and
synchronized. In this alternative, the organizational structure of the
organizational units (OUs) are added as matrix user group to the KVM
matrix configuration. This means that the organizational unit (OU) that
includes the user can be found as a matrix user group in the KVM
matrix configuration after the synchronization. A user can be member
of up to 8 groups.
In case of the organizational unit (OU), all users belonging to groups
that are located directly under this organizational unit are added and
synchronized. The groups can also include subgroups. The structure
of the groups is added to the KVM matrix configuration as user group.
Each group will be represented in the KVM matrix as a user group
after the synchronization. Groups that are located in sub
organizational units will be ignored.
The integration of Active Directory is only available with the controller
board 480-CTRL2.
You have the following options to configure the service: