F5 FirePass, Administrator'S Manual

Page: 72 / 182

Chapter 3
3 - 26
authentication on the FirePass server. This allows FirePass server to add
a machine account for itself, join the domain, and create a trust
relationship with the Primary Domain Controller (PDC). FirePass server
can then authenticate users using native NTLM services.
◆
Netlogon Share
If you do not specify domain administrative credentials when you set up
Windows Domain authentication on the FirePass server, then FirePass
server uses a more basic method for authenticating users. FirePass server
connects to the Primary Domain Controller netlogon share using the
authenticating user’s credentials to determine whether the user has a
valid account within the domain.
To set up Windows domain server authentication
1. Under the Server tab, click the Authentication link.
The Authentication Scheme screen opens.
2. From the For the group drop-down list, select the group that you
want to set up authentication for.
3. Click the Windows Domain Authentication link at the bottom of
the panel.
The Windows Domain Authentication Scheme screen opens.
4. In the Domain Name box, enter the name of the Windows domain.
5. (Optional) In the PDC Server Name box, specify the name of the
Primary Domain Controller (PDC) server if you want to use a
particular PDC when joining the Windows domain, or if the PDC is
on a different subnet than the FirePass server.
6. (Optional) In the WINS Server IP Address box, specify the IP
address of the WINS server to aid in name resolution of the
configured domain or PDC.
Note: The WINS server IP address is usually only necessary if the
domain and PDC are on a different subnet than the FirePass server.
7. If there are FirePass server users with identical user names
belonging to different Domains, select the FirePass Logon
Formatted as DOMAIN\Username option to store the user’s
Domain as part of their FirePass server logon user name.
Note: This option is only necessary if there are FirePass server
users with identical user login names belonging to different
domains.
If you select this option, each user must log in to the FirePass server
using the format of DOMAIN\username.
8. If the FirePass server is able to retrieve Windows Domain groups
from the configured Domain, select a group from the User Must
Belong to Domain Group drop-down list.
This option restricts authentication to users within that domain
group.