Sangfor IAM 2.1, Руководство пользователя

Страница: 167 / 319

SANGFOR IAM v2.1 User Manual
166
the domain controller will not be found when the user is added to the domain.

If a user has logged in to the Active Directory successfully but the primary DNS or IP address
is modified later, single sign-on (SSO) will get invalid; though, it seems that the user can still
use the correct password to successfully log in. In fact, it only indicates that the user is
getting into the Windows instead of the domain, for user will be still required for password to
log in to the domain. This is because that Windows can remember the previous correct login
password and allows the user to enter Windows, but actually it is not a successful logon to the
domain controller.

Domain server IP address, LAN IP address of the IAM gateway device and the user‟s
computer should be able to communicate with each other. This OSS functions only when the
LDAP authentication is enabled, and that the user logs in to the domain controller through its
computer.

To use monitoring mode, check [Use monitoring mode] and type the IP address and port of
the domain controller in the [Login server] text box. This configuration can help to listen to
the information that the client gets authenticated to the domain controller.

If the authentication does not have the IAM gateway device get involved, listening mode
SSO is available only when the listening port is configured. As to the detailed configuration
of a listening port, please refer to Section 7.2.2.5 SNMP Option.

It is better to enable several SSO modes at the same time.
7.2.2.2. POP3 SSO
7.2.2.2.1. POP3 Authentication
POP3 authentication is generally applicable to internal mail system, and each user has been
allocated with an email account. It is flexible for the client‟s email environment and improves the
variety of authentication methods, and makes the authentication process more convenient and
humane.
As to configuring POP3 authentication, the user should be an existing user of POP3 server. If the