H3C Technologies H3C Intelligent Management Center - Manual (Page 384)

366
users synchronized from the LDAP server under this policy are assigned to the selected user
group.
Configure additional information
This area appears only when the additional user information is configured on the IMC platform.
Select an attribute from the list to represent the user additional information entry, or select Do Not
Sync. If you select an attribute, UAM uses the value of the attribute to populate the user additional
information field when executing the synchronization policy. If you select Do Not Sync, enter or
select a value for the user additional information field based on pre-defined rules.
Configure access information
{
Account Name—The system automatically populates this field with the account name attribute
description configured when adding the LDAP server, which cannot be modified.
{
Expiration Time—Select an attribute to represent the expiration time of the LDAP user account,
or select Do Not Sync. If you select an attribute, UAM uses the value of the attribute as the
account expiration time when executing the synchronization policy. If you select Do Not Sync,
click the Calendar icon to select a time or manually enter an expiration time in the format of
YYYY-MM-DD.
{
User Password—Select an attribute from the list to represent the user password, or select Do Not
Sync. If you select an attribute, UAM uses the value of the attribute as the user password when
executing the synchronization policy. If you select Do Not Sync, enter a user password in the text
box next to the list.
{
Max. Idle Time—Select an attribute from the list to represent the maximum idle time, or select Do
Not Sync. If you select an attribute, UAM uses the value of the attribute as the maximum idle time
when executing the synchronization policy. If you select Do Not Sync, enter a maximum idle time
in the text box next to the list.
{
Max. Concurrent Logins—Select an attribute from the list to represent the maximum number of
concurrent logins with the same user account, or select Do Not Sync. If you select an attribute,
UAM uses the value of the attribute as the maximum number of concurrent logins with the same
user account when executing the synchronization policy. If you select Do Not Sync, enter the
maximum concurrent logins in the text box next to the list.
{
Smart Device Bindings for Portal—Select an attribute to represent the maximum device bindings
or select Do Not Sync. If you select an attribute, UAM uses the value of the attribute as the
maximum device bindings when executing the synchronization policy. If you select Do Not Sync,
further select a number to specify the maximum number of device MAC addresses that can be
bound to each LDAP user account, or select Not Supported to disable transparent portal
authentication for all LDAP user accounts synchronized from the LDAP server.
{
Login Message—Select an attribute from the list to represent the login messages displayed when
the users attempt to access the network, or select Do Not Sync. If you select an attribute, UAM
uses the value of the attribute as the user login message when executing the synchronization
policy. If you select Do Not Sync, enter a user login message in the text box next to the list.
Configure access device binding information
{
Device IP—Select an attribute from the list to represent the device IP address, or select Do Not
Sync. If you select an attribute, UAM uses the value of the attribute as the device IP address when
executing the synchronization policy. If you select Do Not Sync, enter a device IP address in the
text box next to the list.
{
Port—Select an attribute from the list to represent the device port number, or select Do Not Sync.
If you select an attribute, UAM uses the value of the attribute as the device port number when