Watchguard Firebox X15, Руководство пользователя

Страница: 163 / 266

Using LDAP/Active Directory Authentication
User Guide 149
6 In LDAP Server Address text box, type the IP address of the
LDAP server the Firebox X Edge will use for authentication
requests.
The LDAP server can be located on any Firebox interface or available
through a VPN tunnel.
7
In the LDAP Server Port text box, type the port number the
Firebox X Edge will use for connections to the LDAP server.
The default LDAP server port number is 389. You do not usually have to
change this number.
8 Use the
LDAP time-out
drop-down list, select the number of
seconds to use as a time-out for any LDAP operation.
9
In the Search Base text box, type the base in the LDAP directory
to start the search for user account entries. This must be a
legitimate LDAP DN (Distinguished Name).
A Distinguished Name is a name that uniquely identifies an entry in an
LDAP directory. A DN includes as many qualifiers as it must to find an
entry in the directory. For example, a DN can look like this:
OU=user accounts,DC=mycompany,DC=com
10 If you select Generic LDAP as the LDAP server type, you must
enter a
Login Attribute Name
and
Group Attribute Name
in
the appropriate text boxes. These text boxes do not appear if
you select Active Directory as the LDAP server type.
The Login Attribute Name is the name of the login name
attribute of user entries in the LDAP directory.
The Group Attribute Name is the name of the group
membership attribute of user entries in the LDAP directory.
11 Click Submit .
Using the LDAP authentication test feature
After the Firebox X Edge is configured to use LDAP authentication,
you can use the LDAP authentication test feature to make sure the
Firebox can connect to the LDAP server. You can use the test for a
specified user account to make sure that the Firebox can success-
fully send and receive authentication requests for that user.
To use the test feature, click LDAP Authentication Test and type the
name and password of an LDAP user account. The user name must
be typed in the domain\user name format, such as mycom-
pany\admin.