Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 185 / 340

Configuring a Secure Access LDAP Server Instance (NSM Procedure)
The Secure Access device supports two LDAP-specific authentication options:
• Unencrypted —the device sends the username and password to the LDAP Directory
Service in clear and simple text.
•
LDAPS —the device encrypts the data in the LDAP authentication session using the
Secure Socket Layer (SSL) protocol before sending it to the LDAP Directory Service.
To configure an LDAP server instance:
1.
In the NSM navigation tree, select Device Manager > Devices .
2.
Click the Device Tree tab, and then double-click the Secure Access device for which
you want to configure an LDAP server instance.
3.
Click the Configuration tab and select Authentication > Auth Servers . The
corresponding workspace appears.
NOTE: If you want to update an existing server instance, click the
appropriate link in the Auth Server Name box and perform the Steps 5
through 8.
4.
Click the New button. The New dialog box appears.
5.
Specify a name to identify the server instance.
6.
Select LDAP Server from the Auth Server Type list.
7.
Configure the server using the settings described in Table 42 on page 167.
8.
Click one:
•
OK —Saves the changes.
•
Cancel —Cancels the modifications.
Table 42: Secure Access LDAP Server Instance Configuration Details
Your Action Function Option
LDAP Settings > Basic Settings tab
Enter the name or IP address of the
LDAP server. Specifies the name or IP address of
the LDAP server that the Secure
Access device uses to validate your
users. LDAP Server
Set the port for the LDAP server. Specifies the port on which the
LDAP server responds.
NOTE: This port is 389 when using
an unencrypted connection and 636
when using SSL.
LDAP Port
167 Copyright © 2010, Juniper Networks, Inc.
Chapter 11: Configuring Authentication and Directory Servers