Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 188 / 340

Table 42: Secure Access LDAP Server Instance Configuration
Details
(continued)
Your Action Function Option
Select any one type of nested group
search from the drop-down list. Specifies the types of nested group
searches available. They are:
• Nested groups in Server Catalog
— This option is faster because it
can search within the implicit
boundaries of the nested group.
• Search all nested groups — With
this option, the device searches
the Server Catalog first. If the
device finds no match in the
catalog, then it queries LDAP to
determine if a group member is a
sub-group.
Nested Group
Search
LDAP Settings > Meetings tab
Enter the username for the server. For
example,
SamAccountName for an
Active Directory server or uid for an
iPlanet server.
Specifies the username attribute for
the LDAP server. User Name
Enter the e-mail address for the server. Specifies the e-mail attribute for the
LDAP server. Email Address
Enter a name. For example, to help the
meeting creator easily distinguish
between multiple invitees with the same
name, you may want to expose an
attribute that identifies the departments
of individual users.
NOTE: Enter the additional attributes
one per line using the format:
DisplayName,AttributeName . You may
enter up to 10 attributes.
Specifies if there are any additional
LDAP attributes whose contents you
want to allow meeting creators to
view (optional). Display Name,
Attributes
Server Catalog > Expressions tab
Enter a name. For example, cn , uid ,
uniquemember , and memberof .
Specifies the name that is used to
show a list of common LDAP
expressions. Name
Enter a value for the LDAP server. Specifies the custom value of the
LDAP server. Value
Server Catalog > Attributes tab
Enter a name for the LDAP attributes. Specifies the name that is used to
show a list of common LDAP
attributes. Name
Server Catalog > Groups tab
Copyright © 2010, Juniper Networks, Inc. 170
Configuring Secure Access Devices Guide