Network Authentication Setup33513. If you enabled [LDAP Referrals], enter the number of additional servers to checkfor user information, into [LDAP Referral Hop Limit].14. For [Search Name Order], select the method that you would like LDAP to use toperform searches.15. Click [Apply].LDAP User MappingsYou can click the [LDAP User Mappings] link to specify the attributes to search forwithin the LDAP database. Make sure that any entries made in the [Imported Heading]boxes are in LDAP nomenclature. For example, you would enter sn (surname) tosearch for the user's last name, and givenName to search for the users first name.Enter cn (Common Name) to search for the most commonly used name (given namejoined to surname) to identify specific users within the LDAP system.LDAP AuthenticationTo set LDAP for authentication, click the [LDAP Authentication] link. For [AuthenticationMethod], choose either [Direct Authentication] or [Authentication of User Attributes].[Direct Authentication] sets authentication with the LDAP server with the user nameand password entered by the user. [Authentication of User Attributes] setsauthentication with the LDAP server to the attributes listed on this dialog, such assamAccountName. Unless you are very familiar with LDAP, do not add text strings tothe User Name.LDAP Group AccessLDAP server user groups can be used to control access to certain areas of themachine. For example, the LDAP server may contain a group of users called "Admin”.You can configure the "Admin" group on the machine so that the members of that groupwill have administrator access to the machine. When a user logs in to the machine withtheir network authentication account, the machine performs an LDAP lookup todetermine if the user is a member of any groups. If the LDAP server confirms that theuser is a member of the "Admin" group, the user will have administrator access. In the[System Administrator Access Group] box, enter the name of the group, defined at theLDAP server, that you want to provide with System Administrator access to themachine. Repeat the process for other LDAP group access boxes.Custom FiltersFor [E-mail Address Filter], in the box provided, type in the LDAP search string (filter)that you wish to apply. The filter defines a series of conditions that the LDAP searchmust fulfill in order to return the information you seek. The form of the typed searchstring (filter) is LDAP objects placed inside parenthesis. For example, to find all usersthat have an E-Mail attribute (mail enabled), type (objectClass=user) (mail=*). If you arenot familiar with LDAP search strings, use a web browser search to find examples.Network Authentication SetupNetwork authentication uses the user information managed on a remote Accountingserver to manage authentication (access) to available machine services.Enabling Network AuthenticationTo enable Network Authentication for use with this machine, at your networkedworkstation, perform the following steps:
