HP 6600 Security Configuration Manual page 421

4. Click Apply.
Table 40 Configuration items
Item
Enable AD
authentication
AD Domain Name
AD Server IP
Authentication Mode
Server Recovery Time
Admin Username
Password
Confirm Password
Username Format
Configuring combined authentication
A combination authentication method can combine any two of the four authentication methods (local
authentication, RADIUS authentication, LDAP authentication, and AD authentication) in any order. With
combined authentication configured, the system authenticates a user twice by using the two specified
authentication methods. You can specify which method is used first, and specify whether to ask for a
password during the second authentication.
Which resources are available for a user who has passed a combined authentication and the online
username used are both determined by the first authentication. When the user accesses single login
resources, the system takes the password used in the first authentication as the login password.
1. Select VPN > SSL VPN > Domain Management > Authentication Policy from the navigation tree.
2. Click the Combined Authentication tab. The combined authentication configuration page appears.
Figure 182 Combined authentication
3. Configure the combined authentication settings as described in
4. Click Apply.
Description
Select this item to enable AD authentication.
Enter the name of the AD domain.
Enter the IP addresses of the AD servers.
You can specify four AD servers at most. When one server fails, the system uses another
server to authenticate users. The system selects the specified servers in the configuration
order of the servers. The first configured server has the highest priority.
Select an authentication mode for AD authentication. Options include Password,
Password+Certificate, and Certificate.
Set the interval at which the system checks whether the failed AD server recovers.
Set an administrator account. It must be a user account that has the directory search
right in the User directory in the AD domain.
Set a password for the administrator account, and enter the password again to confirm
the password.
Set the username format used to log in to the AD server. Options include Without the
AD domain name, With the AD domain name, and Login name.
407
Table 41.