User's Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
Managing Users, Groups, and Authentication 5-13
v1.0, September 2009
If the size limit is exceeded so that “dc=companyname,dc=com” misses some entries during the
lookup process, a user can still be properly authenticated. However, to prevent the size limit from
being exceeded, an AD administrator must set a larger value in the LDAP server configuration so
that the entire list of users and groups is returned in the lookup result. Another workaround is to
use a specific search name or a name with a wildcard in the lookup process, so that the subset of
the entire list is returned in the lookup result.
How to Bind a ‘dn’ in an LDAP Configuration
Understanding how to bind a distinguished name (dn) in an LDAP configuration might be of help
when specifying the settings for the LDAP and Active Directory domains on the STM.
In this example, the LDAP domain name is “ABC.com” and the LDAP server has IP address
192.168.35.115 on port 389. To bind a user with the name Jamie Hanson with the LDAP server:
1. On a computer that has access to the Active Directory (AD), open the Active Directory for
Users and Computers.
2. Select the user Jamie Hanson.
3. Click the General tab. The general properties for Jamie Hanson display.
Figure 5-9