Add/Edit Directory screen details

Screen component Description
Directory

The name of the authentication directory service.

Data type:

Uppercase and lowercase alphanumeric characters and special characters

Example:

Corporate Address List - Region 2

Directory type

The type of authentication directory service, OpenLDAP or Active Directory.

Base DN

The data specifies the starting location that the authentication directory service uses to find users. Enter the domain component or the top of the directory tree so that the user directory can be located:

dc=example,dc=com

Data type:

Uppercase and lowercase alphanumeric characters and special characters.

User naming attribute (OpenLDAP only)

Either UID or CN, as needed.

Organizational unit (OpenLDAP only)

The additional information needed to locate the group in the OpenLDAP structure, starting with the Organizational Unit (OU).

Example:

OU=Engineering

OpenLDAP allows the configuration of multiple user and group OUs.

All the OUs in which the user accounts reside must be explicitly configured, but groups are searched in the subtree.

For example, consider a configuration in which the user accounts are present under:

  • ou=people and

  • ou=admins,ou=people

and groups are present under:

  • ou=groups and

  • ou=IT-groups,ou=groups

To explicitly configure different user and group OUs, the OU entries in this screen would resemble the following:

OU 1: ou=people
OU 2: ou=admins,ou=people
OU 3: ou=groups
OU 4: ou=IT-groups,ou=groups

To perform a subtree search for all the groups under ou-groups, the OU entries in this screen would resemble the following:

OU 1: ou=people
OU 2: ou=admins,ou=people
OU 3: ou=groups
Add (OpenLDAP only)

Generates an additional Organizational unit field.

User name and Password

The credentials of the authentication directory service administrator account that enable the appliance to log in to the directory server and validate the connection.


[NOTE: ]

NOTE: The user name and password are not saved on the appliance.


For Microsoft Active Directory user name login:

  • The @ character implies the User-Principal_Name.

  • The \ character implies a domain\login entry.

If these types of entries do not succeed, the user account is tried in the following order:

  • directory\login. For example, if the directory name is configured as asiapacific and the user account is Neil, then the login asiapacific\Neil would be attempted.


    [NOTE: ]

    NOTE: Directory names are not case-sensitive.


  • The user identifier (UID).

  • The common name (CN).

Directory servers

The name of the server that hosts the authentication directory service.

For more information, see Add Directory Server screen.

See also  

Add an authentication directory service