H3C Technologies H3C Intelligent Management Center - Manual (Page 366)

348
− Manual Assignment—Assign services directly to LDAP users when you configure a
synchronization policy for the LDAP server.
− Based On Active Directory Group—Assign services to LDAP AD groups when you configure
a synchronization policy for the LDAP server. UAM assigns services to users depending on
their LDAP AD groups. For more information, see " Adding a policy when the service sync
type is AD group based ."
{
User Group—User group to which the users synchronized from the LDAP server to UAM belong,
which can be Manual Specify or Synchronize by OU. Manual Specify indicates all LDAP users
are synchronized to the user group that is specified in the synchronization policy assigned to the
LDAP server. Synchronize by OU indicates that UAM builds user groups based on the OU
structure in the base DN of the LDAP server, and synchronizes LDAP users to their respective user
groups.
{
Service Group—Service group that the LDAP server belongs to.
{
Test—Click the Test link to test connectivity to the LDAP server.
{
Modify—Click the Modify icon to modify the settings of the LDAP server.
{
Delete—Click the Delete icon to delete the LDAP server.
{
Certificate—Click the Configure icon for an LDAP server to enter the certificate import wizard.
You must import certificates to UAM if you have enabled the Use SSL function for the LDAP server.
For more information, see " Importing certificates ."
Viewing LDAP server details
1. Access the LDAP server list page.
2. Click the name of the LDAP server whose details you want to view.
The LDAP Server Information page appears.
Basic Information area
{
Server Name—LDAP server name.
{
Version—Version of the LDAP protocol running on the LDAP server. UAM supports LDAPv2 and
LDAPv3.
{
Address—Domain name or IP address of the LDAP server.
{
Port—TCP port to which the LDAP server listens for packets sent by UAM.
{
Server Type—Type of the LDAP server: Microsoft AD or General (any server type, including
Microsoft Windows AD). Microsoft Windows AD specific functions like AD-based service
assignment are only available for Microsoft AD servers.
{
Service Sync Type—The way you assign services to LDAP users.
− Manual Assignment—Assign services directly to LDAP users when you configure a
synchronization policy for the LDAP server.
− Based On Active Directory Group—Assign services to LDAP AD groups when you configure
a synchronization policy for the LDAP server. UAM assigns services to users depending on
their LDAP AD groups. For more information about LDAP synchronization policies, see
"
Adding a policy when the service sync type is AD group based ."
{
Real Time AuthN—Displays whether authentication is performed by the LDAP server.
− Yes—LDAP users are authenticated on the LDAP server.
− No—LDAP users are authenticated on UAM.