Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 187

Copyright © 2010, Juniper Networks, Inc.
Table 42: Secure Access LDAP Server Instance Configuration
Details (continued)
Option Function
Password Specifies the password for the
admin DN name.
LDAP Settings > Finding User Entries tab
Base DN Starts searching for user entries.
Filter Fine tunes the search.
LDAP Settings > Determining Group Membership tab
Base DN Starts searching for user groups.
Filter Fine tunes the search for a user
group.
Member Identifies all the members of a static
Attribute group.
Reverse group Starts the search from the member
search instead of the group.
Query Attribute Specifies an LDAP query that returns
the members of a dynamic group.
Nested Group Specifies how many levels within a
Level group to search for the user.
NOTE: The higher the number, the
longer the query time, so we
recommend that you specify to
perform the search no more than
two levels deep.
Chapter 11: Configuring Authentication and Directory Servers
Your Action
Enter the password.
Enter a base DN name. For example,
DC=eng, DC=Juniper, DC=com.
Enter a filter value. For example,
entersamAccountname=<username>
or cn=<username>.
NOTE:
Include <username> in the filter to
use the username entered on the
sign-in page for the search.
Specify a filter that returns 0 or 1 user
DNs per user; the device uses the first
DN returned if more than 1 DN is
returned.
Enter a base DN name.
Enter a filter value.
Enter a name if you want to identify all
the members of a static group. For
example, enter member uniquemember
(iPlanet-specific).
Select LDAP Settings > Determining
Group Membership > Reverse group
search to enable this option.
Enter a name for the query attribute. For
example, enter memberURL.
Set the number for the search query
time.
169