Appendices
877-877-2269 | blackbox.com
Page 67
Admin Password and LDAP Support
Even if LDAP authentication is enabled, the ‘admin’ user is still authenticated locally, using the traditional authentication technique
of matching to a locally sorted password.
Active Directory authentication process
Typically, Active Directory deployments are not configured for anonymous binding. Hence, in our implementation of LDAP and
Active Directory support for the Wizard DXS - Digital we have opted have a single username and password to bind to the
directory and authenticate.
In order to use the ARQ3 LDAP with Active Directory ensure that “Anonymous bind” is not checked in the LDAP configuration
menu.
The process of authentication and associated LDAP transactions are as follows. A user enters the username and password in the
VNC viewer authentication dialog. This username and password is used as the “binddn” and “bindpw” in the “simple bind
request” sent to the Active Directory server. Upon binding to the directory successfully, a LDAP search is performed for the same
username under the specified User Field in the specified Base DN . If the the search is successful then the authentication is
performed using the password entered by the user. If the password is accepted by the Active Directory server, then the process
of authentication is completed and the user is unbound from the directory.
Linux LDAP authentication process
In order to use the Wizard DXS - Digital LDAP with Linux LDAP ensure that “Anonymous bind” is checked in the LDAP
configuration menu.
The process of authentication and associated LDAP transactions are as follows. A user enters the username and password in the
VNC viewer authentication dialog. An anonymous “simple bind request” is then sent to the LDAP server. No username or
password is sent at this stage. On binding to the directory successfully, a LDAP search is performed for the username, under the
specified User Field and in the specified Base DN. If the the search is successful then the authentication is performed using the
password entered by the user. If the password is accepted by the LDAP server, then the process of authentication is completed
and the user is unbound from the directory.
