Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 147

Copyright © 2010, Juniper Networks, Inc.
Table 41: LDAP Server Instance Configuration Details (continued)
Option
Nested Group Search
LDAP Settings > Meetings tab
User Name
Email Address
Display Name, Attributes
Server Catalog > Expressions tab
Name
Value
Server Catalog > Attributes tab
Chapter 13: Configuring Authentication Servers
Function
Specifies the types of
nested group search
available. They are:
Nested groups in Server
Catalog — This option is
faster because it can
search within the
implicit boundaries of
the nested group.
Search all nested groups
— With this option, the
Infranet Controller
searches the Server
Catalog first. If the
Infranet Controller finds
no match in the catalog,
then it queries LDAP to
determine if a group
member is a subgroup.
Specifies the username
attribute for the LDAP
server.
Specifies the e-mail
attribute for the LDAP
server.
Specifies if there are any
additional LDAP attributes
whose contents you want
to allow meeting creators
to view (optional).
Specifies the name that is
used to show a list of
common LDAP
expressions.
Specifies the custom value
of the LDAP server.
Your Action
Select one type of nested group
search from the drop-down list.
Enter the username for the server. For
example, enter SamAccountName
for an Active Directory server or uid for
an iPlanet server.
Enter the e-mail address for the server.
Enter a name. For example, to help the
meeting creator easily distinguish
between multiple invitees with the
same name, you may want to expose
an attribute that identifies the
departments of individual users.
NOTE: Enter the additional attributes
one per line using the format:
DisplayName,AttributeName.
You may enter up to 10 attributes.
Enter a name. For example, enter cn,
uid, uniquemember, and memberof.
Enter a value for the LDAP server.
129