Ad trust settings – Raritan Computer CCA-0N-V5.1-E User Manual

Page 212

Advertising
background image

Chapter 12: Remote Authentication

194

3. Type a user's attributes in the Filter field so the search query for the

user in the group will be restricted to only those entries that meet this
criterion.

For example, if you specify cn=Groups,dc=raritan,dc=com as the
Base DN and (objectclass=group) as the Filter, then all entries that
are in the Groups entry and are of type group will be returned.

4. Click Next to proceed. The Trusts tab opens.

AD Trust Settings

In the Trusts tab, you can set up trust relationships between this new AD
domain and any existing domains. A trust relationship allows resources
to be accessible by authenticated users across domains. Trust
relationships can be incoming, outgoing, bidirectional, or disabled. You
should set up trust relationships if you want AD modules that represent
different forests in AD to be able to access information from each other.
The trusts you configure in CC-SG should match the trusts configured in
AD.

1. Click the Trusts tab. If you have configured more than one AD

domain, all other domains are listed in the Trusts tab.

2. For each domain in the Trust Partner column, click the Trust

Direction drop-down menu, and then select the direction of trust you
want to establish between the domains. Trust directions are updated
in all AD modules when you make changes to one AD module.

 Incoming: information will be trusted coming in from the domain.

 Outgoing: information will be trusted going to the selected

domain.

 Bidirectional: information will be trusted in both directions from

each domain.

 Disabled: information will not be exchanged between the

domains.

3. Click Apply to save your changes, and then click OK to save the AD

module and exit the window.

The new AD module appears in the Security Manager screen under
External AA Servers.

4. Select the Authentication checkbox if you want CC-SG to use the AD

module for authentication of users. Select the Authorization
checkbox if you want CC-SG to use the AD module for authorization
of users.

5. Click Update to save your changes.

Advertising