Device Security > LDAP > Configuration
Device Security
RM GUI HiSecOS EAGLE20/30
Release
3.0
09/2015
91
Configuration
Parameters Meaning
Client Cache
Timeout [min]
Specifies for how many minutes after successfully logging on the logon
data of a user remain valid. When a user logs on again within this time, no
complex LDAP search operation is necessary. The logon process is much
faster.
Possible values:
1..1440
(default setting:
10
)
Bind User Specifies the user ID in the form of the “Distinguished Name” (DN) with
which the device logs on to the LDAP server.
This information is necessary if the LDAP server requires a user ID in the
form of the “Distinguished Name” (DN) for the log on. In Active Directory
environments, this information is unnecessary.
The device logs on to the LDAP server with the user ID to find the
“Distinguished Name” (DN) for the users logging on. The device conducts
the search according to the settings in the fields "Base DN" and "User
Name Attribute".
Possible values:
Alphanumeric ASCII character string with 0..64 characters
Bind User
Password
Specifies the password which the device uses together with the user ID
specified in the "Bind User" field when logging on to the LDAP server.
Possible values:
Alphanumeric ASCII character string with 0..64 characters
Base DN Specifies the starting point for the search in the directory tree in the form
of the “Distinguished Name” (DN).
Possible values:
Alphanumeric ASCII character string with 0..255 characters
User Name
Attribute
Specifies the LDAP attribute which contains a biunique user name.
Afterwards, the user uses the user name contained in this attribute to log
on.
Often the LDAP attributes
userPrincipalName
,
mail
,
sAMAccountName
,
and
uid
contain a biunique user name.
The device adds the character string specified in the "Default Domain"
field to the user name under the following condition:
– The user name contained in the attribute does not contain the @
character.
– In the "Default Domain" field, a domain name is specified.
Possible values:
Alphanumeric ASCII character string with 0..64 characters
(default setting:
userPrincipalName
)
Default Domain Specifies the character string which the device adds to user name of users
logging on if the user name does not contain the @ character.
Possible values:
Alphanumeric ASCII character string with 0..64 characters
To Next Page
Loading...