C
HAPTER
4: LDAP A
UTHENTICATION
S
ETUP
S
ET UP
LDAP D
OMAIN
G
ROUPS
, M
EMBERS
Set up LDAP Domain Groups, Members
In the control panel, the LDAP domain branch of the tree menu includes options for setting up groups and/or members in the domain so that filtering profiles can later be created. The following options are used in this setup process: Select Group/Member from Domain, Set Group
Priority, Manually Add Member, Manually Add Group, and
Upload User/Group Profile.
Add LDAP groups, users to the tree
Before you can create filtering profiles for groups and/or members in a domain, you must first add the groups and/or members to the tree list for that domain.
146
Fig. 4-16 LDAP User/Group Browser window
8
E
6 T
ECHNOLOGIES
, R3000 E
NTERPRISE
F
ILTER
A
UTHENTICATION
U
SER
G
UIDE
C
HAPTER
4: LDAP A
UTHENTICATION
S
ETUP
S
ET UP
LDAP D
OMAIN
G
ROUPS
, M
EMBERS
Select the LDAP domain, and choose Select Group/
Member from Domain from the pop-up menu to display the
LDAP User/Group Browser window (see Figure 4-12).
This window is used for retrieving the names of groups or users from an LDAP domain so that a filtering profile can be assigned.
NOTE: See Appendix C: LDAP Server Customizations if using an
OpenLDAP server.
Perform a basic search
1. Specify the type of search by clicking the “User” or
“Group” radio button.
2. Choose either “cn=” (common name) or “uid=” (user ID) from the pull-down menu for the attribute type used in the
LDAP directory.
3. In the User or Group Name field, input the group or username exactly as it was entered on the LDAP server, or enter a partial name followed by the asterisk (*) wildcard.
4. Click Search to display rows of results in the grid below.
The following information is included for each entity:
Type (USR or GRP), Name (as entered on the LDAP server), DN string, Profile (Rule number, if assigned),
View button, check box.
Options for search results
After performing a search, you can do either of the following:
• Narrow your search – To narrow your search, make a selection from the OU Name pull-down menu, and then click Search In Results. This will limit your results to the specified section of the LDAP database.
8
E
6 T
ECHNOLOGIES
, R3000 E
NTERPRISE
F
ILTER
A
UTHENTICATION
U
SER
G
UIDE
147
C
HAPTER
4: LDAP A
UTHENTICATION
S
ETUP
S
ET UP
LDAP D
OMAIN
G
ROUPS
, M
EMBERS
• Search within existing results – To search within the list of records returned by your initial query, change your search criteria, and then click Search In Results. This can speed up searches when the LDAP server is slow to respond.
The View button in the Members column is used for either querying the list of groups in which a user is a member, or the list of users who are members of a Group Record.
To select or deselect all items in the grid, click Mark/
Unmark All.
To select or deselect all highlighted items in the grid, click
Mark/Unmark Selected. This feature works only if items
are first selected in the grid by clicking on them.
• Multiple items are selected by clicking one item, and then pressing the Ctrl key on your keyboard and clicking another item.
• A block of multiple items is selected by clicking the first item in the block, then pressing the Shift key on your keyboard, and then clicking the last item in the block.
Apply a filtering rule to a profile
To apply a filtering rule to an entity in the grid:
1. Go to the Mark column and click the checkbox for that entity.
2. Select a filtering rule from the drop-down menu.
3. Click Add Rule to display the selected Rule number in the Profile column.
When the LDAP branch of the tree is refreshed, all entities with rules applied to them appear in the tree.
148
8
E
6 T
ECHNOLOGIES
, R3000 E
NTERPRISE
F
ILTER
A
UTHENTICATION
U
SER
G
UIDE
