Adding Or Editing A Domain With Active Directory Authentication - Dell SonicWall SRA 4200 Administrator's Manual

•
Optionally select the One-time passwords check box to enable the One-time password
Step 7
feature. A drop-down list will appear, in which you can select if configured, required for all
users, or using domain name. These are defined as:
•
•
•
If you select using domain name, an E-mail domain field appears below the drop-down list.
Step 8
Type in the domain name where one-time password emails will be sent (for example, abc.com).
Click Accept to update the configuration. Once the domain has been added, the domain will be
Step 9
added to the table on the Portals > Domains page.

Adding or Editing a Domain with Active Directory Authentication

To configure Windows Active Directory authentication, perform the following steps:
Click Add Domain or the Configure icon for the domain to edit. The Add Domain or Edit
Step 1
Domain window is displayed.
Note
152 | SRA 6.0 Administrator's Guide
Verify partial DN in subject - Use the following variables to configure a partial DN that will
match the client certificate:
User name: %USERNAME%
–
Domain name: %USERDOMAIN%
–
Active Directory user name: %ADUSERNAME%
–
Wildcard: %WILDCARD%
–
if configured - Only users who have a One Time Password email address configured will
use the One Time Password feature.
required for all users - All users must use the One Time Password feature. Users who do
not have a One Time Password email address configured will not be allowed to login.
using domain name - Users in the domain will use the One Time Password feature. One
Time Password emails for all users in the domain will be sent to username@domain.com.
Of all types of authentication, Active Directory authentication is most sensitive to
clock skew, or variances in time between the SRA appliance and the Active Directory
server against which it is authenticating. If you are unable to authenticate using Active
Directory, refer to ""Active Directory Troubleshooting" section on page 155.