User guide

changed after this setting is changed. In addition, the Active Directory server addresses
must be resolvable to their host names via DNS.
When this is not checked, the LDAP protocol will be used.
11. Click Enable Chasing of Referrals to allow the Active Directory server to refer DSView 3
software clients to additional directory servers.
12. Specify the search mode:
Enable Use Recursion to search groups if you wish to have the AD service access the
domain controller for the specified domain name. This search includes the "Member"
attribute of ObjectClass=group. This search is recursive and finds nested groups. This
search may be slow, depending on the number of groups and levels of nesting.
-or-
Enable Use an Active Directory Global Catalog to have the AD service access the
global catalog for the specified domain name. The search includes the "TokenGroups"
attribute of the ObjectClass=user. This search is faster but only retrieves the nested
groups SIDs; subsequent calls must be made to find the group name and specific SIDs.
-or-
Enable Use Windows 2003 Universal Group Caching if you wish to have the AD
service access the domain controller for the specified domain name. The search
includes the "TokenGroups" attribute of the ObjectClass=user. This search is faster but
only retrieves the nested groups SIDs; subsequent calls must be made to find the group
name and specific SIDs. The Windows 2003 Universal Group Caching feature must be
enabled in the Windows 2003 AD server.
13. Click Allow use of Users/Groups from Trusted Forests to allow logins by users belonging
to a forest that are assigned to groups in a different forest. If enabled, the DSView 3 will
query all trusted forests in the Active Directory service to find the user and user groups to
which the authenticated user belongs.
If you deselect Allow use of Users/Groups from Trusted Forests, any previously
discovered trusted forests will be hidden from the User Authentication Services
window and users belonging to trusted forests will not be permitted to log in.
14. Click Save to save your changes.
• If you selected Use SSL in Certificate-based Trust Mode, the Certificates heading will
appear in the side navigation bar. Go to step 13.
• If you selected Do Not Use SSL or Use SSL in Trust All Mode, go to step 16.
Chapter 6: Authentication Services 95