beautypg.com

Configuring external authentication for groups – HP XP Array Manager Software User Manual

Page 66

background image

1.

From the Administration tab, select Users and Permissions.

2.

Select Users folder, then select one or more users (using the checkbox) whose authentication
method you want to change, or click Add User to create a new account.

NOTE:

When creating a new account, only the User ID is required for external authentication, and
must match a user ID on the external authentication server. For a local (internal) account,
a User ID and Password are both required. When external authentication is available, new
user accounts created without a password value are automatically configured to use external
authentication (for example, LDAP is selected for you). Fill in the desired fields, and click
OK to create the user account.

3.

If you have selected existing users, click Change Auth. A dialog box is displayed. From the drop
down list, select the desired authentication method (for example, LDAP) and click OK. The user
list will be re-displayed.

4.

Review the Authentication column to verify the authentication method.

On the next login attempt by each user, the users login credentials (user ID and password) will be
validated using the external authentication server.

TIP:

Set permissions or roles so that the registered user can perform necessary operations using XP7
Command View AE products. Also consider adding user accounts to user groups with assigned roles
for controlled access to resource groups.

Related topics

About user accounts and controlling access to resources

, page 59

Configuring external authentication for groups

, page 66

User ID and password policies

, page 62

Configuring external authentication for groups

External authentication systems can be used to authenticate user groups.

External authentication systems, such as LDAP (for example, Active Directory), RADIUS, or Kerberos
may be used to authenticate XP7 Command View AE user group members as they log in. You can
configure one or more user groups, from one or more external authentication servers.

When linking with an external authentication server, if using together with Active Directory as an
external authorization server, user permissions can be managed by using the Active Directory groups
(authorization groups) registered on the external authorization server. In this case, user permissions
are specified for each group.

Prerequisites

The XP7 Command View AE server must be linked to an external authentication (authorization)
server. See the HP XP7 Command View Advanced Edition Administrator Guide.

The XP7 Command View AE server must be configured to support group authentication, which
activates the Groups folder in the GUI.

Setting up users and access control

66