Watchguard Firebox X20E User Manual page 175

Select the Enable LDAP authentication check box. If user authentication is not enabled in the
3
top section of this configuration page, the LDAP Authentication Service section is not active.
In the Domain Name text box, type the name of the LDAP domain. Do not include the top-level
4
domain.
From the LDAP server type drop-down list, select the type of LDAP implementation you use in
5
your organization: Active Directory or Standard LDAP.
In LDAP Server Address text box, type the IP address of the LDAP server the Firebox X Edge will
6
use for authentication requests. The LDAP server can be located on any Edge interface or
available through a VPN tunnel.
In the LDAP Server Port text box, type the port number the Firebox X Edge will use for
7
connections to the LDAP server. The default LDAP server port number is 389. Usually you do not
have to change this number.
Use the LDAP Timeout drop-down list to select the number of seconds to use as a timeout for
8
any LDAP operation.
In the Search Base text box, type the base in the LDAP directory to start the search for user
9
account entries. This must be a legitimate LDAP DN (Distinguished Name). A Distinguished
Name is a name that uniquely identifies an entry in an LDAP directory. A DN includes as many
qualifiers as it must to find an entry in the directory. For example, a DN can look like this:
ou=user accounts,dc=mycompany,dc=com
You can find more information about how to find your search base at
support/faq.
If you select Standard LDAP as the LDAP server type, you must enter a Login Attribute Name
10
and Group Attribute Name in the appropriate text boxes. These text boxes do not appear if you
select Active Directory as the LDAP server type.
The Login Attribute Name is the name of the login name attribute of user entries in the LDAP
User Guide
Using LDAP/Active Directory Authentication
www.watchguard.com/
163