Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 210

Configuring Secure Access Devices Guide
192
Table 49: Active Directory or NT Domain Instance Configuration
Details (continued)
Option Function
Kerberos (most Allows the Secure Access device to
secure) send user credentials to Kerberos.
NTLMV2 Allows the Secure Access device to
(moderately secure) send user credentials to NTLMv2.
NTLMV1 (least Allows the Secure Access device to
secure) send user credentials to NTLMv1.
Use LDAP to get Allows the Secure Access device to
Kerberos realm retrieve the Kerberos realm name from
name the Active Directory server using the
specified administrator credentials.
Specify Kerberos Specifies Kerberos realm name.
realm name
AD/NT Settings > Advanced tab
User may belong to Specifies that the selected user
Domain Local belongs to the Domain Local Groups
Groups across trust who honor trust relationships in the
boundaries Active Directory.
Container Name Specifies the name that the Secure
Access device uses to join the specified
Active Directory domain as a computer.
Server Catalog > Expressions tab
Name Specifies a name for the user
expression in the Active Directory or NT
domain server user directory.
Value Specifies a value for the user
expression in the Active Directory or NT
Domain server user directory.
Server Catalog > Groups tab
Name Specifies the name of the group
Groups Specifies the admin's domain local
groups information.
AD Group Specifies the group that contains the
administrators to enable centralized
administration in an Active Directory
domain.
Your Action
Select AD/NT Settings >
General >Kerberos (most
secure) to enable this feature.
Select AD/NT Settings >
General >NTLMV2 (moderately
secure) to enable this feature.
Select AD/NT Settings >
General >NTLMV1 (least
secure) to enable this feature.
Select AD/NT Settings >
General >Specify Kerberos
realm name to enable this
feature.
Enter the name.
Select AD/NT Settings >
Advanced > User may belong
to Domain Local Groups across
trust boundaries to enable this
feature.
Enter the computer name.
Enter a name.
Enter a value.
Enter a name.
Enter a name.
Enter a name.
Copyright © 2010, Juniper Networks, Inc.