GE Revolution CT, User Manual

Page: 609 / 702

Field Description
Cache Enterprise Users
○
Enables enterprise users to be cached once they successfully login.
○
If the enterprise directory server is not available due to network or other issues, the following
scenarios occur:
■ If checked, a local record of an enterprise user is kept and you can login.
■
If unchecked, an enterprise user is denied access.
■
Hashed passwords are cached; the actual password is not cached.
Enterprise Authentication Latency (Sec‐
onds)
○ Time the EA3 login process waits for a response from the enterprise directory server.
○
There is frequently a network latency when connecting to servers, which is dependent on your
network configuration.
○ If the amount of time is reached without a response from the enterprise directory server, the
EA3 login process returns a failed login. A value of 5 seconds is usually enough time to allow a
properly configured directory server to respond, without causing undue user inconvenience.
3. Modify the properties in the text fields provided to allow an enterprise directory server
connection.
4. Click [Apply Configuration] to accept the configuration changes.
Click [Restore Configuration] to undo any changes not yet applied.
2.17 Auto configuration
1. Section 2.4, Open EA3 .
2. From the
Enterprise
tab, click [Auto-detect Server Name].
○
The system searches for the server name of the enterprise directory server.
○
If the DNS allows service lookups, EA3 executes an auto-detection with the enterprise
directory server. If it cannot find the server, it is not an error. Continue with these steps
to configure the server.
3. In the
Server Configuration
area, type the
Server Name/IP
of the enterprise directory
server that EA3 should connect to.
The system must have DNS enabled or static information in a hosts file (
/etc/hosts
).
4. Select the
Authentication Type
that the enterprise directory server supports.
○ For a Microsoft Active Directory Server, typically select
Kerberos
.
For a Novell eDirectory Server, typically select
LDAP
.
If you do not know this information, check with the owner of the enterprise directory
server.
○
If the enterprise directory server supports SSL connections, select the
Use SSL
option.
Revolution CT User Manual
Direction 5480385-1EN, Revision 1
Chapter 19 Access Controls 609