F5 FirePass, Administrator'S Manual

Page: 61 / 182

Setting Up FirePass Server Security
FirePass
™
Server Administrator Guide 3 - 15
Importing user accounts from an LDAP server
To import user accounts from an LDAP server
1. In the User Management panel, click the LDAP Import button.
The LDAP import screen opens.
2. If you want to add the users to a group other than the default group,
select the group from the Group list.
3. In the Host box, type the name or IP address of an LDAP server.
4. In the Port box, enter an LDAP port such as 389.
5. If you want to use SSL, select the Use SSL connection option.
6. In the User DN box, enter a user DN. For example:
CN=Administrator,CN=Users,DC=demo,DC=FP,DC=com
7. In the User Password box, enter a password.
Note: You can leave the User DN and User Password boxes blank if
your server allows anonymous access to perform a query.
8. In the Search Base DN box, enter a search base DN to specify
where DN searches start from. For example:
DC=demo,DC=FP,DC=com
9. In the Search Query box, enter a query that produces a draft user
list, which is basically the list of matching DNs.
The search query must be a valid LDAP query expression.
10. Click the Query button.
The LDAP import screen opens
11. Choose entries from the drop-down menus under the LDAP
Attribute heading to map the LDAP attributes into FirePass server
values, such as user name, first and last names, and email address.
Note that the first and last names can be extracted from a compound
attribute (such as cn). To avoid this, select the first empty item from
the Full Name drop-down list.
12. Click the Map Attributes button.
The query returns the list of matching users. Only the user records
that have attributes corresponding to user name have a check box in
front of them. The users with names already in the FirePass server
internal database do not have a check box.
13. Select the users you want to add to the FirePass server. To select all
users in the list, click the Select All Users link at the bottom of the
panel.
14. As necessary, select the MyNetwork Access option and the
MyDesktop Access option to grant the users these access
privileges.
15. Select the Send Email to Users option if you want to notify new
users of their accounts.