D-Link NetDefend DFL-210 User Manual page 322

8.2.4. External LDAP Servers
• Name Attribute
The Name Attribute is the ID of the data field on the LDAP server that contains the username.
The NetDefendOS default value for this is uid which is correct for most UNIX based servers.
If using Microsoft Active Directory this should be set to SAMAccountName (which is NOT case
sensitive). When looking at the details of a user in Active Directory, the value for the user logon
name is defined in the SAMAccountName field under the Account tab.
• Retrieve Group Membership
This option specifies if the groups that a user belongs to should be retrieved from the LDAP
server. The group name is often used when granting user access to a service after a successful
logon.
If the Retrieve Group Membership option is enabled then the Membership Attribute option,
described next can also be set.
• Membership Attribute
The Membership Attribute defines which groups a user is a member of. This is similar to the
way a user belongs to either the admin or audit database group in NetDefendOS. This is another
tuple defined by the server's database schema and the default ID is MemberOf.
In Microsoft Active Directory, the groups a user belongs to can be found by looking at a users
details under the MemberOf tab.
• Use Domain Name
Some servers require the domain name in combination with a username for performing
successful authentication. The domain name is the host name of the LDAP server, for example
myldapserver. The choices for this parameter are:
i. None - This will not modify the username in any way. For example, testuser.
ii. Username Prefix - When authenticating, this will put <domain name>\ in front of the
username. For example, myldapserver/testuser.
iii. Username Postfix - When authenticating, this will add @<domain name> after the
username. For example, testuser@myldapserver.
If the choice is other than None, the Domain Name parameter option described below should be
specified.
Different LDAP servers could handle the domain name differently and you should check your
servers requirements. Most versions of Windows Active Directory require the Postfix option to
be used.
• Routing Table
The NetDefendOS routing table where route lookup will be done to resolve the server's IP
address into a route. The default is the main routing table.
Database Settings
The Database Settings are as follows:
Note: The LDAP server database determines the correct value
This is an attribute tuple and the LDAP server's database schema definitions
determines the correct ID to use.
322
Chapter 8. User Authentication