Tier 1 Authentication Method; Name Resolution Methods - M86 Security M86 Web Filter User Manual

A A: A
PPENDIX UTHENTICATION

Tier 1 authentication method

Name resolution methods

186
O T 1: S
PERATIONS IER
Tier 1 supports the LDAP authentication method. LDAP is a
directory service protocol that stores entries (Distinguished
Names) in a domain's directory using a hierarchical tree
structure. The LDAP directory service is based on a client/
server model protocol to give the client access to resources
on the network.
When a client connects to a server and asks it a question,
the server responds with an answer and/or with a pointer to
the server that stores the requested information (typically,
another LDAP server). No matter which LDAP server the
client accesses, the same view of the directory is "seen."
The LDAP specification defines both the communication
protocol and the structure, or schema, to a lesser degree.
There is an Internet Assigned Network Authority (IANA)
standard set that all LDAP directories should contain. Novell
and Microsoft both have additional schema definitions that
extend the default setups.
Most server operating systems now support some imple-
mentations of LDAP authentication. The Microsoft Active
Directory LDAP-based model became available with the
release of Windows 2000.
The name resolution process occurs when the Web Filter
attempts to resolve the IP address of the authentication
server with the machine name of that server. This contin-
uous and regulated automated procedure ensures the
connection between the two servers is maintained.
When using an LDAP server, the name resolution process
occurs when a Domain Name Service (DNS) entry is made.
In order to accommodate this request, the LDAP server
S -O A
INGLE IGN N UTHENTICATION
M86 S U G
ECURITY SER UIDE