D-Link NetDefend DFL-210 User Manual page 306

8.2.4. External LDAP Servers
unreachable. The default value for this setting is 5.
• Name Attribute
The name of the field in the LDAP server containing the username. The default value is uid.
This should be set to samaccountname if using Active Directory.
• Retrieve Group Membership
If this option is enabled, group memberships will be received from the database. The
Membership Attribute field is enabled if the box is checked.
• Membership Attribute
The name of the field in the LDAP server containing the membership information. The default
value for this field is memberOf. This field is enabled if Retrieve Group Membership is enabled.
• Use Domain Name
Some servers require the domain name in combination with the username for performing
successful authentication. The choices for this parameter are:
• None - This will not modify the username in any way.
• Username Prefix - When authenticating, this will put <domain name>\ in front of the
username.
• Username Postfix - When authenticating, this will add @<domain name> after the
username.
If the choice is other than None, the Domain Name parameter option described below should be
specified.
• Routing Table
The NetDefendOS routing table where route lookup will be done of the server's IP address.
The optional parameters are as follows:
• Base Object
Defines where in the LDAP server tree search for user accounts shall begin.
• Administrator Account
The administrator username. If a prefix or postfix is needed it must be added manually here, this
field is not affected by "Use Domain Name". This field is needed to maintain a bound
connection to the LDAP server.
• Password/Confirm Password
The administrator password.
• Domain Name
The domain name of the computer running the LDAP server. This option is only available if
Server Type is not set to Other.
This field can be left empty and is used when the LDAP server requires the domain name when
performing a bind request. See also the Use Domain Name option above for how the domain
name can be used.
306
Chapter 8. User Authentication