User's Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
5-18 Managing Users, Groups, and Authentication
v1.0, September 2009
3. Click Test to verify that the LDAP server can actually function with the LDAP settings that
you have specified. The automated test procedure checks the connection to the LDAP server;
the bind DN, and the bind password. If any settings require changes, you are notified at the end
of the automated test procedure.
4. Click Apply to save your settings. The LDAP or Active Directory domain and server are
added to the List of LDAP table.
UID Attribute The attribute in the LDAP directory that contains the user’s identifier (uid).
For an Active Directory, enter sAMAccountName.
For an OpenLDAP directory, enter uid.
Member Groups
Attribute
This field is optional. The attribute that is used to identify the groups an entry belongs
to.
For an Active Directory, enter memberOf.
For OpenLDAPy, you can enter a customized attribute to identify the the groups of an
entry.
Group Members
Attribute
This field is optional. The attribute that is used to identify the members of a group.
For an Active Directory, enter: member
For OpenLDAPy, you can enter a customized attribute to identify the members of a
group.
Additional Filter This field is optional. A filter that is used when searching the LDAP server for
matching entries while excluding others. Use the format described by RFC 2254.
The following search term examples match users only:
Active Directory: objectClass=user
Open LDAP: objectClass=posixAccount
Note: If the automated test procedure returns the message “LDAP server test passed
but size limit exceeded,” only a limited number of entries (for example, 1000)
was returned after the LDAP server was queried. To ensure that the lookup
results include all users and groups, set larger values in the LDAP server.
Another workaround is to use a specific search name or a name with a
wildcard in the lookup process, so that the subset of the entire list is returned
in the lookup result.
Table 5-5. LDAP Settings (continued)
Setting Description