Vasco aXsGUARD Gatekeeper AG-3000 Series, Quick Install Manual, Page: 35 / 48

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6
Users and Groups
Table 4: Directory Services > General
Field Group Field Description
Enable DS
Lookups Checked / Unchecked Enables / Disables Directory Service synhronization.
Server Settings Type of Directory Service
Set the type to
Active Directory
.
Server IP address
Add
the IP address of the Active Directory server and any
AD mirrors, if applicable.
Directory Base
(Requires LDAP syntax) Enter the tree base of the Active Directory server,
e.g.
dc=my,dc=domain,dc=com
DS User with search
permission (Requires LDAP
syntax) Enter the user name of the user with the necessary
Directory Base search permissions, e.g.
cn=axsguard,cn=users,dc=my,dc=domain,dc=com
Password Enter the user's password twice.
Integration
Level Synchronize group and user
objects Check to start the synchronization process. Make sure
your user and group templates are configured first, as
explained in the aXsGUARD Gatekeeper Directory Services
How To, which is available through the Documentation
button in the Administrator Tool.
Automatically delete users Automatically deletes users who no longer exist on the AD
server.
Add user email addresses as
aliases Imports the AD email addresses as aliases on the
aXsGUARD Gatekeeper
Add SMTP Proxy Addresses as
email aliases Consult the aXsGUARD Gatekeeper Directory Services How
To for more information
Group
Selection Directory Base for Group
search (Requires LDAP syntax) The path from which AD groups are imported, e.g.
ou=groups,ou=vancouver,dc=my,dc=domain,dc=com
Add these groups only Specify the groups to be imported using the full name or
wildcards, e.g. account*
User Selection Directory Base for User search
(Requires LDAP syntax) The path from which AD users are imported, e.g.
ou=users,ou=vancouver,dc=my,dc=domain,dc=com
Only add users with a valid
primary group Check to only import users who are members of a valid
primary AD group. A valid group is a group within the
specified Directory Base for Group search, in other words
synchronized on the aXsGUARD Gatekeeper.
Only add users who are
members of a valid group This option is identical to the option above, except that the
user is synchronized if one of their groups is a valid group.
(as explained above).
Both
options above are
unchecked .
All users as specified in the Directory Base for User search
are imported.
© 2009 - VASCO Data Security 35