Adding Or Editing A Domain With Nt Domain Authentication - Dell SonicWall SRA 4200 Administrator's Manual

Adding or Editing a Domain with NT Domain Authentication

To configure a domain with NT Domain authentication, perform the following steps:
On the Portals > Domains page, click Add Domain or the Configure icon for the domain to edit.
Step 1
The Add Domain or Edit Domain window is displayed.
If adding the domain, select NT Domain from the Authentication Type menu. The NT Domain
Step 2
configuration fields will be displayed.
If adding the domain, enter a descriptive name for the authentication domain in the Domain
Step 3
Name field. This is the domain name selected by users when they authenticate to the SRA
appliance portal. It may be the same value as the NT Domain Name.
Enter the IP address or host and domain name of the server in the NT Server Address field.
Step 4
Enter the NT authentication domain in the NT Domain Name field. This is the domain name
Step 5
configured on the Windows authentication server for network authentication.
Enter the name of the layout in the Portal Name field. Additional layouts may be defined in the
Step 6
Portals > Portals page.
Optionally select the Enable client certificate enforcement check box to require the use of
Step 7
client certificates for login. By checking this box, you require the client to present a client
certificate for strong mutual authentication. Two additional fields will appear:
•
•
Select the Delete external user accounts on logout check box to delete users who are not
Step 8
logged into a domain account after they log out.
Verify user name matches Common Name (CN) of client certificate - Select this check
box to require that the user's account name match their client certificate.
Verify partial DN in subject - Use the following variables to configure a partial DN that will
match the client certificate:
User name: %USERNAME%
–
Domain name: %USERDOMAIN%
–
Active Directory user name: %ADUSERNAME%
–
Wildcard: %WILDCARD%
–
Portals Configuration | 159