Barracuda Networks SSL VPN, Administrator'S Manual

Page: 60 / 124

60 Barracuda SSL VPN Administrator’s Guide
Configuring User Databases
All user data used and managed by the appliance must be stored somewhere. The Barracuda SSL VPN
allows the configuration of a number of databases to store this information. The User Database
configuration page (Manage System > Access Control > User Databases) lists the available databases.
A ‘Test’ button is provided to check whether the server details are entered correctly
Built-In User Database
Configuring the built-in database is very simple; just select the ‘Built-in’ option on the ‘User Database
Type’ page. The appliance does all configuration of the database itself internally.
As this is a new database, once the appliance is up and running it is necessary to create all Accounts
and Groups from the Manage System interface. With the built-in database you will also be able to edit
and remove users and roles directly.
Active Directory
Active Directory authentication allows for integration with a Microsoft Windows Domain Controller.
Using this method of authentication you can read users and groups directly from the domain controller
and authenticate your users against your Windows domain.
Once you have entered the relevant properties in the configuration page, a connection is made to the
domain controller and when the service account has been authenticated, the Active Directory User
Database is ready to be used.
The Connection area configures how to connect to the Microsoft Windows Active Directory service.
Active Directory database uses simple authentication for the service account. Simple authentication
allows the use of non-standard character sets. With this type of authentication the account credentials
need to be fully qualified.
LDAP
LDAP configuration allows you to authenticate against a standard LDAP User Database. Similarly
to Active Directory authentication, a service account will need to be created in the LDAP schema in
order for the Barracuda SSL VPN to authenticate users in this manner.
LDAP Class Objects
The Barracuda SSL VPN needs to understand which User and Role classes are in use by the given
LDAP installation. Since each installation can use a different type of schema this information makes
the appliance compatible with a larger number of LDAP installations.
Organizational Units (OUs)
In Active Directory and LDAP, ‘Organizational Units’ (OUs) are the key structure for organizing
users, computers, and other object information into a more easily understandable layout.