8e6 Technologies Enterprise Filter Authentication R3000 - Manual (Page 25)

C
HAPTER
1: I
NTRODUCTION
F
ILTERING
E
LEMENTS
8
E
6 T
ECHNOLOGIES
, R3000 I
NTERNET
F
ILTER
A
UTHENTICATION
U
SER
G
UIDE
11
LDAP Domain Groups
An LDAP (Lightweight Directory Access Protocol) domain
on a network server is comprised of LDAP groups and their
associated members (users), derived from profiles on the
network’s authentication server.
The LDAP group type is represented in the tree by the
LDAP icon . This branch will only display if authentica-
tion is enabled. Using the tree menu, the global adminis-
trator adds and maintains LDAP domains , and assigns
designated group administrators (Sub Admins) access to
specific entities (nodes) within that domain. The group
administrator creates and maintains filtering profiles for enti-
ties assigned to him/her. For Active Directory or “Other”
server types, these entities include primary or static
groups , users , or containers . For Novell eDirec-
tory, SunOne, Sun IPlanet, or Netscape Directory server
types, these entities also include dynamic groups . If
users belong to more than one group, the global adminis-
trator sets the priority for group filtering.
Fig. 1-3 LDAP domain diagram, with sample groups and members