Using Ldap For Authentication - Cisco ISA500 Series Administration Manual

User Management
Configuring the User Authentication Settings
STEP 1
STEP 2
STEP 3
STEP 4
Cisco ISA500 Series Integrated Security Appliance Administrator Guide

Using LDAP for Authentication

The security appliance can use the LDAP directory for user authentication, with
support for three schemes including Microsoft Active Directory, RFC2798
InterOrgPerson, and RFC2307 Network Information Service.
Click Users -> Settings.
The User Settings window opens.
In the User Login Settings area, choose LDAP as the authentication method from
the Authentication Method drop-down list.
Click Configure to configure the LDAP settings.
The LADP Settings window opens.
In the Settings tab, enter the following information:
• IP Address: Enter the IP address of the LDAP server that you use for
authentication.
• Port Number: Enter the number of the listening port used on the LDAP
server. Enter a value from 1 to 65535. The default is 389.
• Server Timeout: Enter the amount of time in seconds that the security
appliance will wait for a response from the LDAP server before timing out.
• Login Method: Choose one of the following login methods:
- Annonymous Login: Choose this option if the LDAP server allows for the
user tree to be accessed anonymously.
- Give Login Name or Location in Tree: Choose this option to build the
distinguished name of the user that is used to bind to the LDAP server
from the Primary Domain and User Tree for Login to Server fields in the
Directory tab.
- Give Bind Distinguished Name: Choose this option if the destination
name is known. You must provide the destination name explicitly to be
used to bind to the LDAP server.
• Login User Name: If you choose Give Login Name or Location in Tree or
Give Bind Distinguished Name as the login method, enter the user name of
the account that can log into the LDAP directory.
9
283