General Settings
The following general parameters are used for configuration of each server:
• Name
The name given to the server object for reference purposes in NetDefendOS. For example,
NetDefendOS authentication rules may be defined which reference this name.
This value has nothing to do with the Name Attribute described below. It is only for use by
NetDefendOS and not the LDAP server.
• IP Address
The IP address of the LDAP server.
• Port
The port number on the LDAP server which will receive the client request which is sent using
TCP/IP.
The default port number is 389.
• Source IP Selection
By default (Automatic), the IP address of the firewall's sending interface will be used as the
source address for traffic sent to the LDAP server. If this property is set to Manual, a specific
source IP address can be specified.
If a specific source IP address is specified, the administrator must also manually configure
NetDefendOS to ARP publish the IP address on the sending interface. Doing this is described
in Section 3.5.3, “ARP Publish”.
The default value is Automatic.
• Timeout
This is the timeout length for LDAP server user authentication attempts in seconds. If no
response to a request is received from the server after this time then the server will be
considered to be unreachable.
The default timeout setting is 5 seconds.
• Name Attribute
The Name Attribute is the ID of the data field on the LDAP server that contains the username.
The NetDefendOS default value for this is uid which is correct for most UNIX based servers.
If using Microsoft Active Directory this should be set to SAMAccountName (which is NOT case
sensitive). When looking at the details of a user in Active Directory, the value for the user
login name is defined in the SAMAccountName field under the Account tab.
Note: The LDAP server database determines the correct value
This is an attribute tuple and the LDAP server's database schema definitions
Chapter 8: User Authentication
618
To Next Page
Loading...
