Dell 3-DNS Dokumentacja Pobierz pdf (Strona 391)

Additional Setup Options

BIG-IP® Reference Guide 12 - 17

2. Locate the default authentication type. Change the tc value to point

to the new ldap-defaults type (see Figure 12.13).

3. Create the file /etc/ldapb/servers. Add one line for the host name of

the LDAP server to connect to, and the secret used by that server

user (see Figure 12.14). For security reasons, we recommend that

you use IP addresses instead of host names for the entries in this

file. If you specify a host name for an entry, we recommend that you

add the host name to the /etc/hosts file.

4. Before logging out, test the configuration by running the login

program, either on a virtual console or using Telnet. That way you

can correct any configuration errors before that may prevent you

from accessing the BIG-IP.

Allowing multiple authentication styles

We recommend that you allow multiple authentication styles. This allows

you to log in even if the LDAP or RADIUS server is not working properly.

You can specify multiple authentication styles in the auth field such as

radius,passwd. With the example radius,passwd, RADIUS is the default

authentication style, but you still have the ability to override the style and

force a login using the password file by appending :passwd after the login

ldap-defaults:auth=passwd:\

:auth-ssh=ldap,passwd:\

:ldap-server=my_ldap_server:\

:ldap-server-user=cn=Manager,dc=test,dc=net:\

:ldap-basedn=dc=test,dc=net:\

:ldap-user-bind=no:

Figure 12.12 Example excerpt from the /etc/login.conf for an LDAP server

that stores plain text passwords

default:\

:path=/bin /usr/bin /usr/contrib/bin:\

:datasize-cur=16M:\

:tc=ldap-defaults:

Figure 12.13 Example change to the tc value

# this is the /etc/ldapdb/server file

# format is <ldap server> <secret>

ldap.test.net secret

Figure 12.14 Where to add the host name of the LDAP server

1 2 ... 386 387 388 389 390 391 392 393 394 395 396 ... 425 426

Brak uwag

Dell 3-DNS Dokumentacja Strona 391