Using an Active Directory server
Before the controller can process user authentication using Active Directory, you must join
the controller with the Active Directory server. Fill in the required parameters and select
Join Realm Now. This is usually a one-time event.
Username the controller will use to join Active Directory.
Password the controller will use to join Active Directory.
For security reasons, Username and Password are not stored on the controller.
Join Realm Now
Select to join the realm immediately.
Shows the status of the join operation as follows:
Active Directory groups attributes
Displays all Active Directory groups that are defined on the controller. These groups are
used to assign attributes to a user once they have been authenticated by Active Directory.
Group names on the controller must be identical to existing Active Directory
Organizational Units configured on the Active Directory Server.
Once a user is authenticated by Active Directory, the controller retrieves the names of all
the active directory groups of which the user is a member.
Use LDAP attribute: For non-standard implementation of Active Directory, set this
according to the equivalent setting on the Active Directory server.
Unknown: System is processing, no status to report. Refresh the page to update the
DNS unavailable: DNS not working, cannot access Active Directory.
Missing Config: No configuration, so join cannot proceed.
Never Joined: Administrator never selected Join Realm Now.
Not joined: Not joined: May be joined with the domain, but the join is not confirmed
yet. Status will change to Joined once confirmed. If the Not Joined status persists,
check connectivity between the controller and Active Directory or re-join.
Joined: Active Directory reports that controller successfully joined.
If the user is a member of only one Active Directory group, and that group name
appears in the list, the controller applies the attributes from that group.
If the user is a member of more than one Active Directory group, the controller
applies the attributes from the matching group name with the highest priority
(highest in the list).