beautypg.com

Configure ldap user authentication – Epiphan Pearl Mini Live Video Production System User Manual

Page 155

background image

Pearl Mini User Guide

Configure LDAP user authentication

Alternatively, you can regain access to Pearl Mini if you apply the factory default configuration preset using
the touch screen,

Apply a configuration preset using the touch screen

. The factory default configuration will

change the current settings on Pearl Mini, see

The Factory default configuration preset

.

Configure LDAP user authentication

You can use the Lightweight Directory Access Protocol (LDAP) to authenticate users. Specify user roles by
using group DNs for users who log in as an Administrator, Operator, or as a Viewer.

The system has only

one

admin user and

one

operator. LDAP users must log in as either an admin or an

operator and do not have their own private profiles. Any LDAP users with the name admin, operator, or
viewer are ignored and the local accounts are used instead.

When enabled, LDAP authentication is an

alternative

to the regular system user names and passwords. You

may still login as

admin

,

operator

or

viewer

using the passwords for those accounts.

LDAP replaces the local

viewer

account instead of working side-by-side with it when LDAP is

enabled and the viewer account has no password (either there is no global viewer password
configured or the channel overrides the global password with a blank password). In this case, the
viewer must authenticate with LDAP and

cannot

use the default

viewer

account with a blank

password to log in.

For security reasons, you should configure passwords for the local accounts. See

Configure

LDAP user authentication

.

These instructions assume you have a pre-configured LDAP server. The server must support anonymous
binding or have a special bind account with search access privileges. Note that Active Directory does not
support anonymous binding. LDAP referrals, restrictions and failovers are not supported.

To configure LDAP authentication:

 1. Login to the Admin panel as

admin

, see

Connect to the Admin panel

.

 2. From the Configuration menu, select

Security

. The Security configuration page opens.

 3. In the

LDAP authentication

section, check

Enable LDAP authentication

. Uncheck the check box

to disable LDAP authentication.

144