Administer > Configure Security > Choose a Mode for NNMi Access

Choose a Mode for NNMi Access

Decide how to configure access to NNMi:

  • NNMi Configuration Settings to Control NNMi Access.

    NNMi user names, passwords, and User Group membership are defined within the NNMi database.

  • Lightweight Directory Access Protocol (LDAP) to Control NNMi Access.

    NNMi administrators have choices about which information NNMi gathers from the directory service:

    1. User Accounts (user names and passwords)
    2. User Accounts (user names and passwords) plus User Groups and User Group Mappings
  • X.509 Certificates to Control NNMi Access.

    The X.509 Certificate approach eliminates the need for any passwords.

    Tip NNMi supports Public Key Infrastructure (PKI) user authentication. This includes Smart Cards, such as Common Access Card (CAC) and Personal Identity Verification (PIV).

    NNMi administrators have choices about where NNMi gathers User Account Mapping information:

    1. NNMi's database
    2. Lightweight Directory Access Protocol (LDAP)

Caution You must choose one user authentication strategy and configure all NNMi users with the same approach.

User Authentication Strategy
Mode
Which Method for User Authentication? User Account Definitions in NNMi User Group Definitions in NNMi Which Method for Group Membership?
1 ‑ Internal NNMi Password yes yes NNMi User Account Mappings
2 ‑ Mixed LDAP Password yes yes NNMi User Account Mappings
X.509 Certificate yes yes NNMi User Account Mappings
3 ‑ External LDAP Password no yes LDAP
X.509 Certificate no yes LDAP

* Assign each NNMi user to one or more User Groups. At a minimum, each NNMi user must belong to one of the following:

  • NNMi Administrators
  • NNMi Level 1 Operators
  • NNMi Level 2 Operators
  • Guests