Views:

Procedure

  1. Select AdminAuthentication and Authorization Authentication.
  2. Click the CAC tab.
  3. Click Edit under Active Directory Server Configuration.
  4. In the dialog, configure the Active Directory server options described in the following table.
    Setting Description
    Server Address Fully qualified host name or IP address of the Active Directory server.
    Enable SSL Select Using LDAPS to enable Lightweight Directory Access Protocol (LDAP) over SSL. If enabled, you must also import an Active Directory SSL certificate. See Configure Active Directory authentication.
    Port The port on the Active Directory server that listens for authentication requests. The default non-SSL port is 389; if SSL is enabled, the default port is 636.
    Timeout Timeout, in seconds, for communication with the Active Directory server; the default value is 30 seconds.
    Admin Name Identifies the account on the Active Directory server that is permitted to search the LDAP directory within the defined search base. This is the bind user on the Active Directory server that enables the SMS to query the LDAP directory and authenticate users.
    Example: Administrator@DOMAINNAME
    Admin Password Active Directory server administrative password.
    User Search Base Top-level distinguished name in the Active Directory hierarchical structure where the user search is done. Note: A distinguished name must not contain any forward slashes (/).
    Examples include DC=adomain, DC=example, and DC=com
    User Search Attribute Attribute to use when searching for user login names.
    Username Display Attribute The display name used on the SMS.
    Group Search Base Top-level distinguished name in the Active Directory hierarchical structure where the group search is done. Note: A distinguished name must not contain any forward slashes (/).
    Group Name Attribute The attribute to use when searching for group names.
  5. Test the Active Directory configuration, enter the Admin Password for the server, and then click Test.
  6. Click OK.