Understanding Active Directories And Ldap Configurations - NETGEAR STM150 Appliance Reference Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
In addition to authentication through the STM's local user database, the STM supports the
following external authentication methods for users logging in through the User Portal Login
screen:
• LDAP. A network-validated domain-based authentication method that functions with a
Lightweight Directory Access Protocol (LDAP) authentication server. LDAP is a standard
for querying and updating a directory. Because LDAP supports a multilevel hierarchy (for
example, groups or organizational units), this information can be queried to provide
specific group policies or bookmarks based on LDAP attributes.
• Active Directory. A network-validated domain-based authentication method that
functions with a Microsoft Active Directory authentication server. Microsoft Active
Directory authentication servers support a group and user structure. Because the Active
Directory supports a multilevel hierarchy (for example, groups or organizational units),
this information can be queried to provide specific group policies or bookmarks based on
Active Directory attributes. A Microsoft Active Directory database uses an LDAP
organization schema.
• RADIUS. A network-validated PAP or CHAP password-based authentication method that
functions with Remote Authentication Dial In User Service (RADIUS).
RADIUS support two types of protocols:
– PAP. Password Authentication Protocol (PAP) is a simple protocol in which the client
sends a password in clear text.
– CHAP. Challenge Handshake Authentication Protocol (CHAP) executes a three-way
handshake in which the client and server trade challenge messages, each responding
with a hash of the other's challenge message that is calculated using a shared secret
value.
When logging in through the User Portal Login screen, users must provide their name and
password, and select the domain that corresponds to the authentication method that has been
assigned to them.

Understanding Active Directories and LDAP Configurations

This manual assumes that you already have a knowledge of Active Directories and LDAP servers.
The following sections are meant to provide some additional information before you go to
"Creating and Deleting LDAP and Active Directory Domains" on page
Managing Users, Groups, and Authentication
v1.0, September 2009
5-16.
5-11