SonicWALL SSL-VPN 2000 Administrator's Manual page 254

Select the Allow password changes (if allowed by LDAP server) checkbox if you want to be
Step 8
able to change user's passwords. The admin account must be used when changing user
passwords.
Select the Delete external user accounts on logout checkbox to delete users who are not
Step 9
logged into a domain account after they log out.
Optionally select the One-time passwords checkbox to enable the One-time password
Step 10
feature. A drop-down list will appear, in which you can select if configured, required for all
users, or using domain name. These are defined as:
if configured - Only users who have a One Time Password email address configured will
•
use the One Time Password feature.
required for all users - All users must use the One Time Password feature. Users who do
•
not have a One Time Password email address configured will not be allowed to login.
using domain name - Users in the domain will use the One Time Password feature. One
•
Time Password emails for all users in the domain will be sent to username@domain.com.
If you select One-time passwords, an LDAP e-mail attribute drop-down list appears. Select
Step 11
one of the following:
mail - Select mail if this is the name of your LDAP email attribute.
•
userPrincipalName - Select userPrincipalName if this is the name of your LDAP email
•
attribute.
custom - Select custom to enter any other LDAP email attribute. Enter the attribute name
•
into the Custom attribute field that appears.
Navigate to the Users > Local Groups page and click the configure icon. The Edit Group
Step 12
Settings page is displayed, with fields for LDAP attributes on the General tab.
On the General tab, you may optionally fill out one or multiple LDAP Attribute fields with the
Step 13
appropriate names where name=value is the convention for adding a series of LDAP attributes.
To see a full list of LDAP attributes, refer to the SonicWALL LDAP Attribute document.
As a common example, fill out an attribute field with the memberOf= attribute which can
bundle the following common variable types:
CN= - the common name. DN= - the distinguished name. DC= - the domain component.
You need to provide quote delimiters around the variables you bundle in the memberOf line. You
separate the variables by commas. An example of the syntax using the CN and DC variables would
be:
memberOf="CN=<string>, DC=<string>
SonicWALL SSL VPN 4.0 Administrator's Guide
Users > Local Groups
241