Administrator Guide

198 | Authentication and Authorization Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Parameter Description
Bind User Enable this checkbox to authenticate users by performing a bind operation on the directory using
the credentials (user name and password) obtained during authentication. For clients to be
authenticated by using the LDAP bind method, Policy Manager must receive the password in
cleartext.
Password
Attribute
(Available only
for Generic
LDAP)
Enter the name of the attribute in the user record from which user password can be retrieved.
This is not available for Active Directory.
Password
Type
(Available only
for Generic
LDAP)
Specify whether the password type is Cleartext, NT Hash, or LMHash.
Password
Header
(Available only
for Generic
LDAP)
Specifies the Oracle's LDAP implementation that prepends a header to a hashed password
string. If using Oracle LDAP, enter the header in this field to correctly identify and read the
password .
User
Certificate
Enter the name of the attribute in the user record from which user certificate can be retrieved.
Always use
NETBIOS
name
Check this option to always use NETBIOS name instead of the domain part in username for
authentication.
NOTE: This field is available only if you select Active Directory as an authentication source.
Table 89: Generic LDAPor Active Directory - Primary Tab Parameters (Continued)
Attributes Tab
The Attributes tab defines the Active Directory or LDAP Directory query filters and the attributes to be
fetched by using those filters. The following images are the examples of the Active Directory - Attributes
tab and the Generic LDAP Directory - Attributes tab: