Owner's manual

112 COMMANDCENTER SECURE GATEWAY ADMINISTRATOR GUIDE
10. Click Test Connection to test the LDAP server using the given parameters. You should
receive a confirmation of a successful connection. If not, review the settings carefully for
errors and try again.
11. Click Next to proceed to the Advanced tab to set advanced configuration options for the
LDAP server.
LDAP Advanced Settings
1. Click the Advanced tab.
Figure 106 LDAP Advanced Settings
2. Click the radio button for Base 64 if you want the password to be sent to the LDAP server
with encryption. Click the radio button for Plain Text if you want the password to be sent to
the LDAP server as plain text.
3. Click the Default Digest drop-down menu and select the default encryption of user
passwords.
4. Type the user attribute and group membership attribute parameters in the User Attribute and
Group Membership Attribute fields. These values should be obtained from your LDAP
directory schema.
5. Type the bind pattern in the Bind Username Pattern field.
6. Check Use bind if you want CC-SG to send the username and password entered at login to
the LDAP server for authentication. If Use Bind is not checked, CC-SG will search the
LDAP server for the user name, and if found, will retrieve the LDAP object and locally
compare the associated password with the one entered.
7. On some LDAP servers, the password cannot be retrieved as part of the LDAP object. Check
Use bind after search to instruct CC-SG to bind the password to the LDAP object again and
send it back to the server for authentication.
8. Click OK to save your changes.