Dell PowerConnect W Clearpass 100 Software 3.9 Deployment Guide - Page 165

The default settings for the "access_attr" and "access_attr_used_for_allow" settings mean that only users with the Remote Access Permission selected above will be authorized. To authorize all users in Active Directory, regardless of the individual user account settings for remote access permission, use the following settings: access_attr = nonexistentAttribute access_attr_used_for_allow = no Additional details about the precise operation of these parameters are as follows: If access_attr_used_for_allow is "yes", then the access_attr attribute is checked for existence in the user object.  If the attribute exists and is not set to FALSE, the user is permitted access.  If the attribute exists and is set to FALSE, the user is denied access.  If the attribute does not exist, the user is denied access. If access_attr_used_for_allow is "no", then the access_attr attribute is checked for existence in the user object.  If the attribute exists, the user is denied access.  If the attribute does not exist, the user is permitted access. ldap_connections_number = 5 The number of concurrent connections to make to the LDAP server. timeout = 4 The number of seconds to wait for the LDAP query to finish. ClearPass Guest 3.9 | Deployment Guide RADIUS Services | 165