Users Guide

160 | Authentication and Authorization Dell Networking W-ClearPass Policy Manager 6.3 |User Guide
Parameter Description
Select the
attributes
for filter
This table has a name and value column. There are two ways to enter the attribute name
l By going to a node of interest, inspecting the attributes, and then manually entering the
attribute name by clicking on Click to add... in the table row.
l By clicking on an attribute on the right hand side of the LDAP browser. The attribute
name and value are automatically populated in the table.
The attribute value field can be a value that has been automatically populated by selecting
an attribute from the browser, or it can be manually populated. To aid in populating the
value with dynamic session attribute values, a drop down with the commonly used
namespace and attribute names is presented (See image below).
Table 66: Configure Filter Popup (Filter Tab) (Continued)
The following table describes the steps used in creating a filter.
Step Description
Step 1
Select
filter
node
The goal of filter creation is to help Policy Manager understand how to find a user or device
connecting to the network in LDAP or Active Directory. From the Filter tab, click on a node
that you want to extract user or device information from. For example, browse to the Users
container in Active Directory and select the node for a user (Alice, for example). On the right
hand side, you see attributes associated with that user.
Step 2
Select
attribute
Click on attributes that will help Policy Manager to uniquely identify the user or device. For
example, in Active Directory, an attribute called sAMAccountName stores the user ID. The
attributes that you select are automatically populated in the filter table displayed below the
browser section (along with their values). In this example, if you select sAMAccountName,
the row in the filter table will show this attribute with a value of alice (assuming you picked
Alice’s record as a sample user node).
Table 67: Filter Creation Steps