Authentication settings Expand the 'Authentication settings' menu to define user connection on SES8. Authentication mode
LDAP settings If LDAP is activated, Administrators can set a number of LDAP settings, including:
In order to use LDAP on SPN9, it is necessary to map the attributes required to identify a user - Email, Given Name/First Name and Family Name - from the LDAP database to the server. If LDAP is chosen as the authentication mode, administrators can set up a mapping to automatically create groups in SES from LDAP information. When the user logs on, the LDAP attribute containing the group names (usually 'memberOf') will be automatically imported as a SPN9 group and the user will be added to this group. Notes:
|
Identifying LDAP settings
To find LDAP details, you can run the following queries from any member server on your Windows domain:
To find users:
dsquery user -name "John"
This will list all users who's name is John
To find details of a user and identify attributes names:
dsquery * "OU=John_Doe,DC=your,DC=domain,DC=com" -attr *