3.2

Table Of Contents
Setting User Authentication Providers and Importing Users
117
LDAP Server Configuration Settings
The following table describes the LDAP server settings that are needed for authentication and
import.
Setting Description
LDAP Server IP address of the LDAP server.
LDAP Port Port for the LDAP service. For Standard LDAP, accept the default port 389.
For Active Directory Global Catalog LDAP, specify port 3268. For LDAP
enabled over SSL (LDAPS), specify port 636
Use SSL Select this option if the LDAP uses Secure Sockets Layer (SSL) technology.
n
Secured LDAP requires an X.509 certificate infrastructure. For more
information, see the Microsoft article “How to enable LDAP over SSL
with a third-party certification authority.
User DN for Searches User DN for a user who has the right to query the directory. This DN will be
used for logging on to the LDAP directory and performing a search for
importable objects after you click the Import LDAP Users button.
Password for Searches Password for a user who has the right to query the directory. This password
will be used for logging on to the LDAP directory after you click the Import
LDAP Users button.
Search Root DN DN root for searches in the LDAP database. This DN specifies the search root
that will be used after you click the Import LDAP Users button. This DN
typically points to the branch of the LDAP tree where the user objects are
located. Typical examples are
“CN=queryuser,CN=Users,DC=company,DC=com” for Windows Active
Directory LDAP, or “CN=queryuser,DC=company,DC=com” for OpenLDAP.
For an example of importing users from an Active Directory structure with
multiple domains, see
Authentication from an Active Directory that Includes
Multiple Domains” on page 120
.
User Object Class Object class attribute of a User. This value will be used as a search filter after
you click the Import LDAP Users button. Interplay will perform an
ldap_search request on the directory, and all returned objects that match User
Object Class will be imported. A typical setting for Microsoft AD LDAP
would be organizationalPerson. For OpenLDAP, a typical object class would
be simpleSecurityObject.