Page Comparison

NetMRI uses internal and external authentication systems to control user authentication for performing all administrative tasks. For a simple rollout, you can use the NetMRI local authentication database, which is called the local authentication service, where all user accounts and login information are contained within the appliance. You can also link NetMRI to an external Active Directory, RADIUS, TACACS+, LDAP, SAML, or OCSP authentication server or server group in the enterprise network to perform user authentication and authorization for NetMRI tasks, using the same user roles and privileges defined on the local NetMRI system. Doing so requires creating new authentication services in NetMRI.

...

To configure the authentication service's Active Directory servers, complete the following:

1. Click In the Add Authentication Service dialog box, click the Servers tab.
2. Click Add to To add Active Directory servers to the service, click New. The Add Authentication Server dialog opens.box opens
3. In the Add Authentication Server dialog box, do the following:
   
   1. Enter the Host/IP Address.
   2. Choose the Encryption Type: None or SSL. For information, see Using a Certificate File for an LDAP or AD Service. In the Encryption field, if you select SSL, the Authentication Port field changes its value to match the SSL protocol.

   3. If using SSL, choose the certificate from the Certificate drop-down list. The certificate can be loaded into NetMRI from the server that issued it.

      Note
      title Note
      When configuring authentication using Active Directory with SSL encryption, a fully qualified domain name (FQDN) is required for the Server Name or IP address field in the Add Active Directory Server dialog.

      
      

   4. Choose the Priority for the new server in the authentication service. In this context, the priority value determines the order of which servers in the services are queried by NetMRI.
   5. If necessary, enter the Port value. AD's default TCP application with SSL encryption port is 636, and 389 for non-encrypted communication.
   6. Click Save to save your configuration.
   7. Click Cancel to close the dialog.

...

1. Click the Remote Groups tab.
   1. In the Remote Group field, enter the name of an AD server's remote group.
   2. Choose the Role for the new remote group. For more information, see Defining and Editing Roles.
   3. Select the checkboxes for the device groups you want to allow for the remote group. Note that the SysAdmin role applies to all device groups. Other roles allow the selection of individual device groups.
   4. Click OK to complete the configuration.
   5. When finished with the remote group configuration, click Save and then Close. Note that you can add multiple Roles for the remote group.
2. Click Test to To test the server settings, click Test. Enter a valid username and password. A successful test returns the list of groups to which the test user belongs.

...

To configure a NetMRI SAML authentication service, complete the following:

...