LDAP Settings Parent topic

Administration > IWSVA Configuration > User Identification | User Identification
LDAP Settings
IWSVA supports the Microsoft Active Directory and Linux OpenLDAP servers. To connect to the server, you need to specify your vendor, map any unique attributes used by the system, and then provide the location and log on credentials for both the LDAP and Kerberos servers.
Note
Note
Contact your network LDAP administrator for a list of these settings. Also, note that some fields are case sensitive. Separate multiple values within a field with commas.
  • LDAP vendor
    Click to show the Server Type drop-down list and choose the type of LDAP server on your network. IWSVA supports the following:
    • Microsoft Active Directory
    • Linux OpenLDAP
  • LDAP server host name
    Enter the DNS host name or FQDN (fully qualified domain name) of your primary LDAP server.
  • Listening port number
    Enter the port that the LDAP server uses to listen for incoming requests, typically 389.
    Note
    Note
    For an LDAP over SSL, port 636 is typically used to listen for incoming requests, and the default Global catalog port is 3269. For an Active Directory, the default port for a Global catalog enabled Active server is 3268.
  • Administrator account
    Enter the log on credentials for an administrator-level account on the LDAP server. The format you use depends the kind of LDAP you have.
    • Microsoft Active Director
      Enter the UserPrincipalName, for example:
      user@domain.com
      Note
      Note
      If transparent identification is enabled, you should enter the account of the Domain Adminstrator's group in the Active directory server.
    • OpenLDAP
      Enter the Distinguished Name (DN) for example:
      uid=LOGON_ID,ou=People,dc=us,dc=example,dc=com
  • Password
    Enter the password for the admin account previously specified.
  • Base distinguished name
    Enter the base distinguished name of the directory service -- indicates the starting point for LDAP searches of the directory service.
    DC=us,DC=example,DC=com
See also: