Stormshield SN series - Connecting to an External LDAP Directory; Step 1: Selecting the Directory; Step 2: Accessing the Directory

Access to the internal LDAP
Enable unencrypted
access (PLAIN)
Data entered will not be encrypted, but displayed in plaintext.
Enable SSL access
(SSL certificate
presented by the
server)
In order to set up SSL access, you will need to select a certificate server already
generated by your root CA, or an imported certificate.
Connecting to an external LDAP directory
The external LDAP is a directory to which your Stormshield Network multi-function firewall will
connect.
Step 1: Selecting the directory
Select the LDAP base of your choice. This is the first step in the configuration of this directory.
Select the option Connect to an external LDAP directory and click on Next.
Step 2: Accessing the directory
Name Name enabling the identification of the external LDAP directory when several
directories have been defined on the firewall.
Server Select an object corresponding to your LDAP server from the drop-down list. This
object has to be created prior to this step and must reference the IP address of your
LDAP server.
Port Enter the listening port of your LDAP server. The default port is: 389.
Root domain (Base
DN)
Enter the root domain (DN) of your directory. The DN represents the name of an entry,
in the form of a path to it, from the top to the bottom of the tree structure. The field
can be entered using the name of the Root Domain (DN).
Example of a DN
The LDAP domain is “company.com” so my Root domain (Base DN) should be
“dc=company,dc=com”
Read-only access If this option is selected, you will not be able to perform any actions in write mode on
the external LDAP directory.
Anonymous
connection
This option makes it possible to log on to the external LDAP directory without entering
any username or password. The LDAP server must of course authorize anonymous
connections.
If this option is selected, the fields Username and Password will become inactive
(grayed out).
Username An administrator account allowing the firewall to connect to your LDAP server and
make changes (reading and writing privileges) to certain fields.
We recommend that you create a specific account for the firewall and assign
privileges to it only in the necessary fields.
Example
cn=id
This field will be inactive when the Anonymous connection checkbox has been
selected.
Page 99/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
DIRECTORIES CONFIGURATION