XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
(XUA) 1.85 Reference Manual
Appendix A: The UACONF File
XYPRO Technology Corporation 225 Proprietary and Confidential
A30: LDAP_GROUP_DEFAULT
If the value is ON, indicates that the LDAP_GROUP under which it appears will be
used when multiple LDAP Groups are configured and none is specified via a password
prefix composed of the LDAP_GROUP value surrounded by the
LDAP_GROUP_CHARACTERS string.
Syntax:
LDAP_GROUP_DEFAULT {ON | OFF}
Example:
LDAP_GROUP_DEFAULT ON
When this keyword is not present, the default behavior is OFF.
Only one LDAP_GROUP can be designated the default via this keyword with the value
ON.
The following Example is for setting a default LDAP group when multiple-LDAP
Groups are configured.
UACONF Example:
LDAP_IMPERSONATION_CHARACTERS "//"
LDAP_GROUP_CHARACTERS "++"
LDAP_GROUP LD1
LDAP_GROUP_DEFAULT OFF
LDAP_HOST X1.Y1.Z1.LOCAL
...
LDAP_GROUP LD2
LDAP_GROUP_DEFAULT ON
LDAP_HOST X2.Y2.Z2.LOCAL
...
In the LOGON Example below, USER1 will be authenticated using the host
X2.Y2.Z2.LOCAL.
Because the LDAP_GROUP LD2 is defined as the default LDAP Group in the
UACONF file, the password will be passed to the LDAP proxy of the group LD2.
USER1 need not prefix the groupname and the LDAP_GROUP_CHARACTERS in the
password field when the default for the LDAP Group is set.
LOGON Example:
TACL> LOGON USER1
Password: mypassword