Specifications

120 COMMANDCENTER SECURE GATEWAY ADMINISTRATOR GUIDE
Figure 98 AD Group Settings
2. Specify a Base DN (directory level/entry) under which the groups, containing the user to be
authorized, will be searched.
EXAMPLE DESCRIPTION
dc=raritan,dc=com
The search query for the user in the
group will be made over the whole
directory structure.
cn=Administrators,cn=Users,dc=raritan,dc=com
The search query for the user in the
group will be performed only in the
Administrators sub-directory (entry).
3. Type a user’s attributes in Filter so the search query for the user in the group will be
restricted to only those entries that meet this criterion. For example, if you specify
cn=Groups,dc=raritan,dc=com as the Base DN and (objectclass=group) as the Filter, then
all entries that are in the Groups entry and are of type group will be returned.
4. Click Next to proceed. The Trusts tab opens.
AD Trust Settings
In the Trusts tab, you can set up trust relationships between this new AD domain and any existing
domains. A trust relationship allows resources to be accessible by authenticated users across
domains. Trust relationships can be incoming, outgoing, bidirectional, or disabled. You should set
up trust relationships if you want AD modules that represent different forests in AD to be able to
access information from each other. The trusts you configure in CC-SG should match the trusts
configured in AD.
1. Click the Trusts tab. If you have configured more than one AD domain, all other domains are
listed in the Trusts tab.