LDAP Authentication

Under LDAP Configuration, you can configure the options below. For complete information on these LDAP parameters, please refer to your LDAP server/client documentation.





Enabled

Click the Enabled check box to enable LDAP authentication for AADS. Once enabled, Host Integrator will use LDAP to authorize and authenticate all users. To enable LDAP authentication, you must disable security for Host Integrator and security profiles must not have any groups associated with them. For general security information, see the Security Overview. Note: Once you have enabled LDAP, you can associate groups with profiles and product security can be turned on.



LDAP Provider

Specifies the name of the LDAP provider. The syntax is 

ldap://hostname:port number/<optional domain suffixes within the directory>



LDAP Administrator User ID

Specifies the user ID of the LDAP Administrator. Type in the name of your LDAP Administrator.



LDAP Administrator Password

Specifies the password of the LDAP Administrator. Type in the password for the LDAP administrator in the left box and then again in the confirmation box on the right to ensure there are no errors.


Note: For the following characters in a password, type in the alternate shown here. Ampersand (&) - Use &amp; Characters > or < - Use &gt; or &lt;

LDAP User Search Base

Specifies the location within the directory from which we search for named users.



LDAP User Attribute Name

Specifies the attribute name AADS is to use when authenticating users. See the documentation for your LDAP server if you are unsure what to enter here.



LDAP Group Search Base

Specifies the location within the directory from which we search for groups. See the documentation for your LDAP server if you are unsure what to enter here.



LDAP Group Attribute Name

Specifies the location within the directory from which we search for named users groups.



LDAP Group Value

Specifies the value of the LDAP group attribute that AADS is to use when searching for groups. The group attribute plus group value give AADS a combination to search with: Anything that matches is considered a group. Typically, LDAP objects have several objectclass attributes, but "objectclass" taken together with a group value such as "groupOfUniqueNames" identifies the pool of groups. See the documentation for your LDAP server if you are unsure what to enter here.



LDAP Group Member Attribute Name

Specifies how to search for the members of the group. Host Integrator searches for the attributes named "uniqueMember".







© 1999-2007 Attachmate Corporation. All rights reserved. Terms of Use.