Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 146

NSM Infranet Controller Configuration Guide
128
Table 41: LDAP Server Instance Configuration Details (continued)
Option
Filter
LDAP Settings > Determining Group Membership tab
Base DN
Filter
Member Attribute
Reverse group search
Query Attribute
Nested Group Level
Function
Fine tunes the search.
Searches for user groups.
Fine tunes the search for a
user group.
Specifies members of a
static group.
Specifies that the search
starts from the member
instead of the group.
Specifies an LDAP query
that returns the members
of a dynamic group.
Specifies how many levels
within a group to search for
the user.
NOTE: Because the higher
the number, the longer the
query time, we recommend
that you specify to perform
the search no more than
two levels deep.
Your Action
Enter a filter value. For example, enter
samAccountname= <username> or
cn= <username>
NOTE:
Include <username> in the filter to
use the username entered on the
sign-in page for the search.
Specify a filter that returns 0 or 1
user DNs per user; the Infranet
Controller uses the first DN returned
if more than one DN is returned.
Enter a base DN name.
Enter a filter value.
Enter a name if you want to identify
all the members of a static group. For
example, enter member
uniquemember (iPlanet-specific).
Select LDAP Settings>Determining
Group Membership > Reverse group
search.
Enter a name for the query attribute.
For example, enter memberURL.
Set the number for the search query
time.
Copyright © 2010, Juniper Networks, Inc.