NETGEAR SSL312 manual Ldap Authentication Domains for Group Policies and Bookmarks

Page 70

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

LDAP Authentication Domains for Group Policies and Bookmarks

LDAP (Lightweight Directory Access Protocol) is a standard for querying and updating a directory. Since LDAP supports a multilevel hierarchy (for example, groups or organizational units), the SSL VPN Concentrator can query this information and provide specific group policies or bookmarks based on LDAP attributes. By configuring LDAP attributes, the SSL VPN Concentrator administrator can leverage the groups that have already been configured in an LDAP or Active Directory database, rather than manually recreating the same groups in the SSL VPN Concentrator.

Once an LDAP authentication domain is created, a default LDAP group will be created with the same name as the LDAP domain name. Although additional groups may be added or deleted from this domain, the default LDAP group may not be deleted.

For an LDAP group, you may define LDAP attributes. For example, you can specify that users in an LDAP group must be members of a certain group or organizational unit defined on the LDAP server. Or you can specify a unique LDAP distinguished name.

Note: The Microsoft Active Directory database uses an LDAP organization schema. The Active Directory database may be queried using Kerberos authentication (the

standard authentication type; this is labeled “Active Directory” domain authentication in the SSL VPN Concentrator), NTLM authentication (labeled “NT Domain” authentication in the SSL VPN Concentrator), or using LDAP database queries. So, an LDAP domain configured in the SSL VPN Concentrator can authenticate to an Active Directory server.

To add an LDAP authentication domain, see “Authentication Domains” in Chapter 7.

Sample LDAP Attributes

You may enter up to 4 LDAP attributes per group. The following are some example LDAP attributes of Active Directory LDAP users:

name=”Administrator”

memberOf=”CN=Terminal Server Computers,CN=Users,DC=netgearnetworks, DC=net”objectClass=”user”

msNPAllowDialin=”FALSE”

6-20

Group and User Access Policies

v1.0, August 2006

Image 70
Contents Netgear ProSafe SSL VPN Concentrator SSL312 Reference Manual Technical Support EU Regulatory Compliance Statement V1.0, August Contents Chapter Network Settings Chapter Port Forwarding Appendix B Related Documents Index About This Manual Conventions, Formats and ScopeHow to Use This Manual How to Print this ManualPrinting a Chapter Xii Chapter Introduction Key FeaturesAbout the ProSafe SSL VPN Concentrator Web Browser Requirements Microsoft WindowsHardware Description What’s in the BoxFront Panel Back Panel Chapter Basic Installation and Configuration Installing the SSL VPN ConcentratorConfiguring the ProSafe SSL VPN Concentrator Https//192.168.1.1V1.0, August Logging in to the Management Interface User Name admin Password password V1.0, August Chapter Status and Logging SSL VPN Concentrator StatusStatus and Logging Event Log Priority of Log Messages Value Definition Active Users Log Settings E-mail Settings section Alerts Error Click Apply to confirm your settings Chapter General Settings System Configuration UtilitiesEncrypting the Configuration File Exporting and Saving a Backup Configuration FileImporting a Configuration File Erasing and Restoring the Default Settings Upgrading the SSL VPN Concentrator FirmwareTime and Date Settings V1.0, August Certificate Management V1.0, August V1.0, August V1.0, August V1.0, August V1.0, August Configuring Network Settings Chapter Network SettingsSample SSL VPN Concentrator Configuration Network Interface Configuration V1.0, August Network Route Configuration Click Apply to save your settingsV1.0, August Network Host Table Settings Configuring DNS Settings V1.0, August Chapter Group and User Access Policies Users, Groups and Global Policies10.0.0.0 Editing Global Policy Settings Global PoliciesAdding and Editing Global Policies V1.0, August Groups Configuration Defining and Editing Global BookmarksAdding a New Group Editing Group Settings Defining and Editing Group Policies V1.0, August Defining and Editing Group Bookmarks Deleting a Group You can also delete a group by clicking its Delete linkUsers Configuration Adding a New User Editing a User V1.0, August Defining and Editing User Policies Defining and Editing a User Bookmarks Deleting a User Ldap Authentication Domains for Group Policies and Bookmarks Sample Ldap AttributesLdap Attribute Rules Sample Ldap Users and Attributes SettingsQuerying an Ldap Server V1.0, August Authentication Domains Chapter Domains and LayoutsLocal User Database Authentication Radius Authentication NT Domain Authentication Ldap Authentication CN=Users,DC=yourdomain,DC=com Active Directory Authentication V1.0, August SSL VPN Concentrator Portal Layouts Deleting a DomainAdding Portal Layouts Portal Layout and Theme Name sectionV1.0, August V1.0, August Customizing the Banner Duplicating and Editing Portal Layouts V1.0, August Advanced Portal Page Layout Specifications Chapter Network Resources Network Resources V1.0, August V1.0, August SSL VPN Client Configuration Chapter VPN Tunnel ClientAdding IP Address Ranges Adding Routes for VPN Tunnel Clients V1.0, August V1.0, August V1.0, August Configuring Applications for Port Forwarding Chapter Port ForwardingPort Forwarding Applications/TCP Port Numbers Configuring Host Name Resolution 10-4 Port Forwarding Appendix a Default Settings and Technical Specifications Factory Default SettingsTechnical Specifications GMTAppendix B Related Documents Document LinkV1.0, August Index NumericsIndex-2 Index-3 Index-4 Index-5 Index-6
Related manuals
Manual 122 pages 23.62 Kb