User guide

KVM.NET
®
II
54
Base DN – here you define the base object where the search for users begins. The
search is performed only on this object and the objects below it in the directory
tree. The Base DN string has the standard LDAP syntax: CN=(Common Name…),
OU=(Organizational Unit), DC=(Domain Component). Base DN should be in the
following format DC=domain,DC=tld. For example for the domain kvm.net.org,
the Base DN should be DC=kvm,DC=net,DC=org.
Host – Type the Host name or (preferably) the IP address of the Active Directory
DC server.
Port - Type the LDAP port number. If left blank; KVM.net II uses the default
LDAP port 389 (which is the default port for most LDAP servers including
Microsoft Active Directory).
Bind DN – Also known as “User DN” or “Append”. The Bind DN is a
distinguished name of an LDAP object, which serves a gateway to the LDAP
directory. Prior to sending the account/password pair, KVM.net II initiates a
conversation handshake with LDAP. This handshake protocol in general needs a
"Bind DN/Bind password" pair to decide, whether the KVM.net II client is
permitted to query the LDAP directory server. (For example if we have user
Minicom in group Users in domain kvm.net.org the Bind DN should look like this:
CN=minicom,CN=users,DC=kvm,DC=net,DC=org).
Type the Active Directory objects you would like to search and the user account
that will be used to perform this operation.
Password – Type the password for the user account given in the Bind DN.
4. Click . The system queries the Active Directory. (This may take
some time). The and buttons become enabled.
9.3.2.4 Importing users
To import users, press , the Import Users window appears, see
Figure 48. Here you see all the Groups in the Active Directory.
To display the Users in a directory, expand the Group.
Notes:
• Users must be members of groups in order to be shown in the Import Users
Active Directory tree. Users belonging to the container “Users” in the Active
Directory, do not necessarily belong to any Group.
• You can use the Active Directory command “dsquery user” to list all
Active Directory users with their correct Bind DN parameters. Run “dsquery
user” at the command prompt of your Active Directory Domain Contoller.