Auto Configuration - GE Revolution CT User Manual

Field
Cache Enterprise Users
Enterprise Authentication Latency (Sec‐
onds)
3. Modify the properties in the text fields provided to allow an enterprise directory server
connection.
4. Click [Apply Configuration] to accept the configuration changes.
Click [Restore Configuration] to undo any changes not yet applied.

2.17 Auto configuration

1. Section 2.4, Open
Enterprise tab, click [Auto-detect Server Name].
2. From the
○
The system searches for the server name of the enterprise directory server.
○
If the DNS allows service lookups, EA3 executes an auto-detection with the enterprise
directory server. If it cannot find the server, it is not an error. Continue with these steps
to configure the server.
Server Configuration area, type the Server Name/IP of the enterprise directory
3. In the
server that EA3 should connect to.
The system must have DNS enabled or static information in a hosts file (/etc/hosts).
Authentication Type that the enterprise directory server supports.
4. Select the
○
For a Microsoft Active Directory Server, typically select
For a Novell eDirectory Server, typically select
If you do not know this information, check with the owner of the enterprise directory
server.
○ If the enterprise directory server supports SSL connections, select the
Chapter 19 Access Controls
○ Enables enterprise users to be cached once they successfully login.
○
If the enterprise directory server is not available due to network or other issues, the following
scenarios occur:
■
If checked, a local record of an enterprise user is kept and you can login.
■ If unchecked, an enterprise user is denied access.
■
Hashed passwords are cached; the actual password is not cached.
○
Time the EA3 login process waits for a response from the enterprise directory server.
○ There is frequently a network latency when connecting to servers, which is dependent on your
network configuration.
○
If the amount of time is reached without a response from the enterprise directory server, the
EA3 login process returns a failed login. A value of 5 seconds is usually enough time to allow a
properly configured directory server to respond, without causing undue user inconvenience.
EA3.
Revolution CT User Manual
Direction 5480385-1EN, Revision 1
Description
Kerberos .
LDAP .
Use SSL option.
609