D-Link DFL-1600 - Security Appliance, Руководство пользователя

Страница: 367 / 552

The following general parameters are used for configuration of each server:
• Name
The name given to the server object for reference purposes in NetDefendOS. For example,
NetDefendOS authentication rules may be defined which reference this name.
This value has nothing to do with the Name Attribute described below. It is only for use by
NetDefendOS and not the LDAP server.
• IP Address
The IP address of the LDAP server.
• Port
The port number on the LDAP server which will receive the client request which is sent using
TCP/IP.
This port is by default 389.
• Timeout
This is the timeout length for LDAP server user authentication attempts in seconds. If no
response to a request is received from the server after this time then the server will be considered
to be unreachable.
The default timeout setting is 5 seconds.
• Name Attribute
The Name Attribute is the ID of the data field on the LDAP server that contains the username.
The NetDefendOS default value for this is uid which is correct for most UNIX based servers.
If using Microsoft Active Directory this should be set to SAMAccountName (which is NOT case
sensitive). When looking at the details of a user in Active Directory, the value for the user logon
name is defined in the SAMAccountName field under the Account tab.
Note: The LDAP server database determines the correct value
This is an attribute tuple and the LDAP server's database schema definitions
determines the correct ID to use.
• Retrieve Group Membership
This option specifies if the groups that a user belongs to should be retrieved from the LDAP
server. The group name is often used when granting user access to a service after a successful
logon.
If the Retrieve Group Membership option is enabled then the Membership Attribute option,
described next can also be set.
• Membership Attribute
The Membership Attribute defines which groups a user is a member of. This is similar to the
way a user belongs to either the admin or audit database group in NetDefendOS. This is another
tuple defined by the server's database schema and the default ID is MemberOf.
In Microsoft Active Directory, the groups a user belongs to can be found by looking at a users
details under the MemberOf tab.
• Use Domain Name
Some servers require the domain name in combination with a username for performing
8.2.4. External LDAP Servers Chapter 8. User Authentication
367