Manual Configuration - GE Optima XR646 Operator's Manual


If the directory type is MSAD, both the realm name and the DN should be populated. If the directory
type is eDirectory, the realm name will be blank. If you are attempting to configure a directory server
that is not MSAD or Novell eDirectory, the configuration will have to be done manually. You'll need to
get the correct LDAP property information from the owner of the directory server.

If this is a non-MSAD, non-eDirectory server, or is a server with a non-default configuration, it is possi-
ble that you may need to change some properties manually. See below for a definition of all of the
properties that you can configure.
7. Enter a username and password of a user that resides on the directory server.
8. Press [Login].

You will see login result information in the Login Results section on the bottom of the tab.

This will indicate if the login was successful or not.

Additionally, it will print out the First Name, Last Name, and any group memberships for the user. You
may get a warning if First Name, Last Name, or Group Memberships were not found.

Getting this warning means 1 of two things:

The LDAP properties are mis-configured (i.e. First Name Attribute, Last Name Attribute, and/or Group
Attribute)

The user doesn't have a First Name, Last Name, or any Group Memberships configured on the Enter-
prise directory server.

If you get these warnings, you may want to talk with the owner of the directory server to make sure
you have everything set up correctly.

If the test login succeeded and you are satisfied with the first name, last name, and group member-
ship information, then your Enterprise directory server is properly configured.
9. Press [Apply Configuration].

This makes the configuration changes. Just like other tabs in the Administration component, pressing
Restore Configuration will undo any changed made that have not yet been applied.

Manual Configuration

As mentioned before, if you are connecting to a directory server that is not MSAD or Novell eDirectory, or
the directory server you are connecting to has a custom configuration, you may need manually config-
ure some of the properties. Here are definitions of all of the LDAP configuration properties and what they
do.

Format - This is either set to domain or dn. domain is the 'MSAD' way of doing LDAP authentication (i.e
<userId>@<realm name>). dn is the other way of doing LDAP authentication, which eDirectory, and
most other directory servers use (i.e. loginAttribute=<userId>,<ldap base dn>). If you are connecting
to a non-MSAD directory server, it's pretty safe to say that you should use dn.

DN - This is the LDAP base DN of the LDAP server to which you are connecting. Usually this is the fully
qualified domain name separated by a bunch of 'DC='. For example, if the fully qualified domain
name of the directory server is 'example.com', it is likely that the DN will be 'DC=example,DC=com'.

Login Attribute - This is the LDAP attribute that should be used for the unique identifier of the user.
This is what they will use as their user id to login. On MSAD this is 'sAMAccountName, and on eDirec-
5495975-1EN Rev.9
© 2013-2017 General Electric Company. All rights reserved.
Appendix A: Login Administration
A-17