HP XP7 Audit Log User and Reference Guide (H6F56-96001)

Table Of Contents
DescriptionItem
Indicates whether to connect an authentication server to an authorization serverExternal User Group
Mapping
Enable: Connects an authentication server to an authorization server
Disable: Does not connect an authentication server to an authorization server
Indicates the name of certificate fileCertificate File Name
Indicates the LDAP protocol to useAuthentication Protocol
Indicates whether to search for the LDAP server using the information registered in the SRV
records in the DNS server
DNS Lookup
Enable: Performs the search using information registered in the SRV records in the DNS
server
Disable: Performs the search using the host name and the port number
Indicates the host name of the LDAP serverHost Name
Indicates the port number of the LDAP serverPort Number
Indicates the domain name that the LDAP server managesDomain Name
Indicates the Base DN for searching for users to authenticateBase DN
Commas that are input by user are indicated with spaces
Indicates the DN of the user for searchingSearch User's DN
Indicates the number of seconds before the connection to the LDAP server times outTimeout
Indicates the retry interval in seconds when the connection to the LDAP server failsRetry Interval
Indicates the retry times when the connection to the LDAP server failsNumber of Retries
The number of external authentication servers that are setNum. of Servers
Example 4
08xx,YYYY/MM/DD,HH:MM:SS.xxx, 00:00,RMI AP,uid=user-name,1,
Task Name,[ACM],Setup Server,Kerberos,Normal end,
from=xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx,,Seq.=xxxxxxxxxx
+{DNS Lookup,Realm Name,Primary Host Name,Primary Port Number,
Clock Skew,Timeout,Secondary Server,Secondary Host Name,
Secondary Port Number}=
-{Disable,example1.com,example2.com,88,300,10,Enable,example3.com,
88}
++{External User Group Mapping,Certificate File Name,
Authentication Protocol,Primary Port Number,Base DN,
Search User's DN,Timeout,Retry Interval,Number of Retries,
Secondary Sever,Secondary Port Number}
=-{Enable,CFFILE,STARTTLS,389,-dc=example4 dc=com,example5.com,
10,1,20,Enable,389}
+Num. of Servers=1
Basic Information for Example 4
DescriptionParameter
Indicates that the Kerberos server is used as the External Authentication server.Kerberos
ACM Descriptions 55