User's Guide

Table Of Contents

Table 75: LDAP Schema Deﬁnition Settings (continued)

Field Description

User Authentication Type Speciﬁes the user authentication. Valid values are:

• LDAP Bind – Only works with a plain text password. It is

useful for authentication from the captive portal but does

not work with most 802.1x authentication types.

• NTLM Auth – This option is only useful when the backend

LDAP server is a Microsoft Active Directory server. This is an

extension to LDAP bind that will use ntlm_auth to verify the

NT hash challenge responses from a client in MsCHAP,

MsCHAPV2, and PEAP requests.

• NT Hash Password Lookup – If the LDAP server has the

user’s password stored as an NT hash that is readable by

another system, you can have Identity and Access read the

hash from the LDAP server to verify the hashes within an

MsCHAP, MsCHAPV2, and PEAP request.

• Plain Text Password Lookup – If the LDAP server has the

user’s password stored unencrypted and that attribute is

accessible to be read via an LDAP request, then this option

reads the user’s password from the server at the time of

authentication. This option can be used with any

authentication type that requires a password.

User Password Attribute This is the name of the password used with the NT Hash

Password Lookup and Plain Text Password Lookup listed above.

Host Search Class Indicates the class used for hostname.

Host Search Attribute Indicates the name of the attribute in the host object class that

contains the hostname.

Use Fully Qualiﬁed Domain Name Select this option to use the Fully Qualiﬁed Domain Name

(FQDN). Clear this option to use the hostname without domain.

OU Object Classes Organizational Unit Object Classes