Specifications

Chapter 8 Authentication Services
4. Click Custom Field Labels in the side navigation bar. The Authentication Service User Account Custom Field Labels
- Internal window will open.
5. Type the text that you wish to appear in each of the six custom field labels.
6. Click Save and then click Close. The User Authentication Services window will open.
By default, the custom field labels do not display in the User Accounts - All window, but they may be added to the display
(or added to the default display by an administrator), using the Customize link.
8.1.2 Active Directory external authentication service
NOTE: When adding an Active Directory external authentication service, you can allow trusted forests to be discovered. A forest is a group of
domains, and a forest may have a trusted relationship with other forests. In some configurations, a user may belong to one forest but be assigned to
groups in another forest. The DTX Control server needs access to both forests to authenticate and authorize this user.
To add an Active Directory external authentication service:
1. Click the Users tab.
2. Click Authentication Services in the top navigation bar. The User Authentication Services window will open.
3. Click Add. The Add Authentication Service Wizard will appear.
4. The Provide Authentication Service Name and Type window will open.
a. Type a name for the external authentication service.
b. Select Active Directory from the menu.
c. Click Next.
5. The Specify Active Directory Connection Settings window will open.
a. Type the Active Directory domain name for the domain you wish to add in the AD Domain Name field.
b. In the User Container field, specify the name of the container to search for user accounts. This will limit the
search scope to that container. The name may be entered in several forms, optionally including a sub-domain.
Valid forms are explained below by example.
Assume an Active Directory domain name of “sunrise.mycompany.com” with users in subfolder
“sun/myusers.” The User Container field may be entered as:
Example 1 (no sub-domain): “sun.myusers”
Example 2 (no sub-domain): “ou=myusers,ou=sun”
If users are contained in a sub-domain such as “mktg.sunrise.mycompany.com”, valid forms are:
Example 1 (with sub-domain): “mktg.sunrise.mycompany.com/sun/myusers”
Example 2 (with sub-domain and no container specified): “mktg.sunrise.mycompany.com/”
Example 3 (with sub-domain): “ou=myusers,ou=sun,dc=mktg,dc=sunrise,dc=mycompany,dc=com”
c. In the Group Container field, specify the name of the container to search for user groups. This will limit the search
scope to that container. The name may be entered in several forms, optionally including a sub-domain. Valid
forms are explained in step 5b above.
d. In the Username Type menu, select the type of username. Each choice in the menu contains an example.
A Full Windows 2000 username is specified as username@domain.
A Partial Windows 2000 username is specified as username.
A Full Pre-Windows 2000 username is specified as domain\username.
724-746-5500 | blackbox.com Page 58