Sentry Industries PT22 62

LDAP Technical Specifications

Simple Bind Authentication Process

Client	LDAP Server	Sentry
Initiate Sentry		Prompt for login
session		credentials
Authentication		Simple bind using
request with		Simple bind using
request with		Search Bind
Usename/		Search Bind
Usename/		DN & Password
Password		DN & Password
Password
		Subtree search
	Successful	starting from
	Successful	User Search Base
	Bind?	User Search Base
	Bind?	DN with User
		DN with User
		Search Filter
	Username	Simple Bind using
	Username	User FQDN and
	found?	User FQDN and
	found?	login password
		login password
		Subtree search
	Successful	starting from
	Successful	User Search Base
	Bind?	User Search Base
	Bind?	DN with User
		DN with User
		Search Filter
Access Denied
		Attribute name
	Username	compared to
	Username	Group
	found?	Group
	found?	Membership
		Membership
		Attribute
		Username groups
	Attribute	access rights
	Attribute	compared against
	match?	compared against
	match?	Sentry LDAP
		Sentry LDAP
		groups
	Group
	match?
Access Granted

MD5 Bind Authentication Process

Client	LDAP Server	Sentry
Initiate Sentry		Prompt for login
session		credentials
Authentication		SASL Digest-MD5
Authentication		bind using
request with		bind using
request with		uppercase
Usename/		uppercase
Usename/		username &
Password		username &
Password		entered password
		entered password
		Subtree search
	Successful	starting from
	Successful	User Search Base
	Bind?	User Search Base
	Bind?	DN with User
		DN with User
		Search Filter
		Attribute name
	Username	compared to
	Username	Group
	found?	Group
	found?	Membership
		Membership
		Attribute
Access Denied
		Username groups
	Attribute	access rights
	Attribute	compared against
	match?	compared against
	match?	Sentry LDAP
		Sentry LDAP
		groups
	Group
	match?
Access Granted

62 • Advanced Operations	Sentry PT22
	Installation and Operations Manual