User's Manual

Chapter 6: Security
125
8. SSL Port - The default is 636. Either use the default port or specify
another port. This field is enabled when the "LDAP over SSL"
checkbox is selected.
9. Use only trusted LDAP Server Certificates - Select this checkbox if
you would like to use a trusted LDAP server certificate file, that is, a
certificate file signed by the CA. When NOT selected, you can use all
LDAP/LDAPS server certificates, including a self-signed certificate
file. A certificate file is required after enabling this option.
10. Server Certificate - Consult your authentication server administrator
to get the CA certificate file for the LDAP/LDAPS server. Use the
Browse button to navigate to the certificate file. This file is required
when the "Use only trusted LDAP Server Certificates" checkbox is
selected.
Tip: You can first upload the CA certificate file for a future use before
selecting the "Use only trusted LDAP Server Certificates" checkbox,
and then select the checkbox when you need to utilize the certificate
file.
11. Anonymous Bind - For "OpenLDAP," use this checkbox to enable or
disable anonymous bind.
 To use anonymous bind, select this checkbox.
 When a Bind DN and password are required to bind to the
external LDAP/LDAPS server, deselect this checkbox.
12. Use Bind Credentials - For "Microsoft Active Directory," use this
checkbox to enable or disable anonymous bind.
 To use anonymous bind, deselect this checkbox. By default it is
deselected.
 When a Bind DN and password are required to bind to the
external LDAP/LDAPS server, select this checkbox.
13. Bind DN - Specify the DN of the user who is permitted to search the
LDAP directory in the defined search base. This information is
required only when the Use Bind Credentials checkbox is selected.
14. Bind Password and Confirm Bind Password - Enter the Bind
password in the Bind Password field first and then the Confirm Bind
Password field. This information is required only when the Use Bind
Credentials checkbox is selected.
15. Base DN for Search - Enter the name you want to bind against the
LDAP/LDAPS (up to 31 characters), and where in the database to
begin searching for the specified Base DN. An example Base Search
value might be: cn=Users,dc=raritan,dc=com. Consult your
authentication server administrator for the appropriate values to
enter into these fields.
16. Type the following information in the corresponding fields. LDAP
needs this information to verify user names and passwords.