Compatible Systems 5.4 - Manual (Page 259)

Chapter 14 - General 253
Primary Server
This sets the IP address (e.g., 192.168.9.99) or fully qualified domain name
(e.g., monkeywrench.com) of the primary LDAP server which contains the
authentication information.
Primary Password
This string is used to authenticate the device to the primary LDAP server. If
this is not set, then the device will attempt an anonymous bid to the server.
The Primary Password may be up to 32 characters long.
Secondary Server
This sets the IP address (e.g., 192.168.9.99) or fully qualified domain name
(e.g., monkeywrench.com) of the secondary LDAP server which contains the
authentication information.
Secondary Password
This string is used to authenticate the device to the secondary LDAP server.
If this is not set, then the device will attempt an anonymous bid to the server.
The Secondary Password may be up to 32 characters long.
Base
This specifies the portion of the LDAP tree where the authentication informa-
tion is located.
VPN Group Attribute
This value specifies the attribute name given to the VPN group attribute
which has been defined in the LDAP server. There are no standard attributes
defined by LDAP for this attribute, so you must specify one. If this field is
left blank, the device will assume the attribute name to be “vpngroupattr”.
VPN Shared Secret Attribute
This value specifies the name given to the VPN shared secret attribute which
has been defined in the LDAP server. There are no standard attributes defined
by LDAP for this attribute, so you must specify one. If this field is left blank,
the device will assume the attribute name to be “sharedsecret”.
Timeout
This value is the number of seconds the device will wait for a response from
the LDAP server.