Amer Networks E5Web GUI User Manual
Page 529
•
Name
The name given to the server object for reference purposes in cOS Core. For example, cOS
Core authentication rules may be defined which reference this name.
This value has nothing to do with the Name Attribute described below. It is only for use by
cOS Core and not the LDAP server.
•
IP Address
The IP address of the LDAP server.
•
Port
The port number on the LDAP server which will receive the client request which is sent using
TCP/IP.
The default port number is 389.
•
Timeout
This is the timeout length for LDAP server user authentication attempts in seconds. If no
response to a request is received from the server after this time then the server will be
considered to be unreachable.
The default timeout setting is 5 seconds.
•
Name Attribute
The Name Attribute is the ID of the data field on the LDAP server that contains the username.
The cOS Core default value for this is uid which is correct for most UNIX based servers.
If using Microsoft Active Directory this should be set to SAMAccountName (which is NOT case
sensitive). When looking at the details of a user in Active Directory, the value for the user
logon name is defined in the SAMAccountName field under the Account tab.
Note: The LDAP server database determines the correct value
This is an attribute tuple and the LDAP server's database schema definitions
determines the correct ID to use.
•
Retrieve Group Membership
This option specifies if the groups that a user belongs to should be retrieved from the LDAP
server. The group name is often used when granting user access to a service after a successful
logon.
If the Retrieve Group Membership option is enabled then the Membership Attribute option,
described next can also be set.
•
Membership Attribute
The Membership Attribute defines which groups a user is a member of. This is similar to the
way a user belongs to either the admin or audit database group in cOS Core. This is another
tuple defined by the server's database schema and the default ID is MemberOf.
Chapter 8: User Authentication
529