D-Link DFL-260-IPS-12 Product Manual - Page 361
Note: The LDAP server database determines the correct value, IP Address, Timeout, Name Attribute
View all D-Link DFL-260-IPS-12 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 361 highlights
8.2.4. External LDAP Servers Chapter 8. User Authentication The following general parameters are used for configuration of each server: • Name The name given to the server object for reference purposes in NetDefendOS. For example, NetDefendOS authentication rules may be defined which reference this name. This value has nothing to do with the Name Attribute described below. It is only for use by NetDefendOS and not the LDAP server. • IP Address The IP address of the LDAP server. • Port The port number on the LDAP server which will receive the client request which is sent using TCP/IP. This port is by default 389. • Timeout This is the timeout length for LDAP server user authentication attempts in seconds. If no response to a request is received from the server after this time then the server will be considered to be unreachable. The default timeout setting is 5 seconds. • Name Attribute The Name Attribute is the ID of the data field on the LDAP server that contains the username. The NetDefendOS default value for this is uid which is correct for most UNIX based servers. If using Microsoft Active Directory this should be set to SAMAccountName (which is NOT case sensitive). When looking at the details of a user in Active Directory, the value for the user logon name is defined in the SAMAccountName field under the Account tab. Note: The LDAP server database determines the correct value This is an attribute tuple and the LDAP server's database schema definitions determines the correct ID to use. • Retrieve Group Membership This option specifies if the groups that a user belongs to should be retrieved from the LDAP server. The group name is often used when granting user access to a service after a successful logon. If the Retrieve Group Membership option is enabled then the Membership Attribute option, described next can also be set. • Membership Attribute The Membership Attribute defines which groups a user is a member of. This is similar to the way a user belongs to either the admin or audit database group in NetDefendOS. This is another tuple defined by the server's database schema and the default ID is MemberOf. In Microsoft Active Directory, the groups a user belongs to can be found by looking at a users details under the MemberOf tab. • Use Domain Name Some servers require the domain name in combination with a username for performing 361