Chapter 5: Using the Web Interface
131
User entry object class
User search subfilter (also called BaseSearch)
Note: The Dominion PX will preoccupy the login name attribute and
user entry object class with default values, which should not be
changed unless required.
17. Active Directory Domain - Type the name of the Active Directory
Domain. For example, testradius.com. Consult with your Active
Directory Administrator for a specific domain name.
18. To verify if the LDAP/LDAPS configuration is done correctly, you may
click Test Connection to check whether the Dominion PX can connect
to the LDAP/LDAPS server successfully.
Tip: You can also do this by using the Test Connection button in the
Authentication Settings dialog.
19. Click OK to save the changes. The new LDAP server is listed in the
Authentication Settings dialog.
20. To add additional LDAP/LDAPS servers, repeat Steps 3 to 19.
21. Click OK to save the changes. The LDAP authentication is now in
place.
Note: If the Dominion PX clock and the LDAP server clock are out of sync,
the certificates are considered expired and users are unable to
authenticate using LDAP. To ensure proper synchronization,
administrators should configure the Dominion PX and the LDAP server to
use the same NTP server.
More Information about AD Configuration
For more information about the LDAP configuration using Microsoft Active
Directory, see
LDAP Configuration Illustration
(on page 396).
Sorting the LDAP Access Order
The order of the LDAP list determines the access priority of remote
LDAP/LDAPS servers. The Dominion PX first tries to access the top
LDAP/LDAPS server in the list for authentication, then the next one if the
access to the first one fails, and so on until the Dominion PX device
successfully connects to one of the listed LDAP/LDAPS servers.
Note: After successfully connecting to one LDAP/LDAPS server, the
Dominion PX STOPS trying to access the remaining LDAP/LDAPS
servers in the list regardless of the user authentication result.
To re-sort the LDAP server access list:
1. Choose Device Settings > Security > Authentication. The
Authentication Settings dialog appears.
Содержание PX-1000 Series
Страница 423: ...Appendix E Integration 408 3 Click OK ...