mirror of
https://github.com/Cacti/documentation.git
synced 2026-10-31 09:07:43 +09:00
59 lines
2.1 KiB
Markdown
59 lines
2.1 KiB
Markdown
# User Domain Management
|
|
|
|
This page describes **User Domains in Cacti 1.2**. The unreleased Cacti 1.3
|
|
development branch replaces this screen with
|
|
[Login Providers](Login-Providers.md). User Domains are a core Cacti feature
|
|
in 1.2, not a separate plugin.
|
|
|
|
User Domains in Cacti are a way of providing Custom Login
|
|
experiences to differing groups of users and using LDAP
|
|
or Active Directory Group Permissions to limit who
|
|
can login using those customer permissions.
|
|
|
|
Once a user login in for the first time, their permissions
|
|
will enherit the Template accounts permission settings
|
|
including User Group's and their permissions.
|
|
|
|
So, as the name implies, you can have from one to many
|
|
LDAP and Active Directory entries in the User Domains interface.
|
|
|
|
A use example would be for example 3 levels of customers
|
|
who will have access to the system. For example lets
|
|
say those three groups are:
|
|
|
|
- Administrators
|
|
- Managers
|
|
- Client Team
|
|
|
|
Each of these users groups are controlled by Active Directory
|
|
there are AD User Groups that map one-to-one with these
|
|
Groups. When you have these three Domains setup and enabled,
|
|
when you goto the Cacti Login screen there will be a drop-down
|
|
settings with the three Domains listed in the drop-down.
|
|
|
|
If a normal user tries logging as an Administrator, their
|
|
login will be blocked and so on.
|
|
|
|
The first image shows the list of domains, which domain is
|
|
primary, and the actions you can take on a Domain.
|
|
|
|
|
|
|
|
In this second screen, you can see the User Domain login screen
|
|
where you can pick AD or LDAP, the credentials, importantly the
|
|
Template User Account (That which holds base permissions),
|
|
and the require group membership, which when you check it,
|
|
you can then specify the AD and LDAP User Group paths.
|
|
|
|
|
|
|
|
In the last images, you can see the Group Settings information, and
|
|
if you have the users Full Name and Email stored in LDAP or
|
|
AD, you can pull that information and make it a part of the
|
|
Cacti wrapper account when it's first created.
|
|
|
|
|
|
|
|
---
|
|
Copyright (c) 2004-2026 The Cacti Group
|