Fujitsu Control 4 Serie Guia Del Usuario página 73

5. LDAP
LDAP servers
The Address fields specify the host names or IP addresses of the primary and
secondary LDAP servers. The secondary LDAP server is optional.
The Port fields specify the User Datagram Protocol (UDP) port numbers that
communicate with the LDAP servers. The default value is 389 for non-secure
LDAP and 636 for secure LDAP (LDAPS). The default Port ID is automatically
entered by the software when an access type is specified.
The Access Type radio buttons specify how a query is sent to each LDAP target
device. When using LDAP, all usernames, passwords and other information sent
between an appliance and LDAP server are sent as non-secure clear text. Use
LDAPS for secure encrypted communication between an appliance and LDAP
server.
To configure LDAP server parameters:
1. Select Appliance - Appliance Settings - User Accounts - LDAP Accounts >
Overview.
2. Identify the primary and secondary server address, port and access type in
the appropriate fields or radio buttons.
3. Click Save.
LDAP Search parameters
On the LDAP Search page, you can configure the parameters used when
searching for LDAP directory service users. Use the Search DN field to define an
administrator-level user that the appliance uses to log into the directory service.
Once the appliance is authenticated, the directory service grants it access to the
directory to perform the user authentication queries specified on the LDAP Query
page. The default values are cn=Administrator, cn=Users, dc=yourDomainName
and dc=com and may be modified. For example, to define an administrator
Distinguished Name (DN) for test.view.com, type cn=Administrator, cn=Users,
dc=test, dc=view, and dc=com. Each Search DN value must be separated by a
comma. The Search Password field is used to authenticate the administrator or
user specified in the Search DN field. Use the Search Base field to define a
starting point from which LDAP searches begin. The modifiable default values
are dc=yourDomainName and dc=com. For example, to define a search base for
test.com, type dc=test, dc=com. Each Search Base value must be separated by
a comma. The UID Mask field specifies the search criteria for User ID searches of
LDAP target devices. The format should be in the form <name>=<%1>. The
68
590-1058-640A