AD Advanced Settings

• To configure advanced AD settings:

1. Click the Advanced tab.
2. Type the port number on which the AD server is listening. The default port is 389. If you are using secure connections for LDAP, you may need to change this port. The standard port for secure LDAP connections is 636.
3. Select the Secure Connection for LDAP checkbox if you want to use a secure channel for the connection. If checked, CC-SG uses LDAP over SSL to connect to AD. This option may not be supported by your AD configuration.
4. Specify a Base DN (directory level/entry) under which the authentication search query will be executed. CC-SG can do a recursive search downward from this Base DN.

   Example	Description
   dc=raritan,dc=com	The search query for the user entry will be made over the whole directory structure.
   cn=Administrators,cn=Users,dc=raritan,dc=com	The search query for the user entry will be performed only in the Administrators sub-directory (entry).

5. Type a user's attributes in the Filter field so the search query will be restricted to only those entries that meet this criterion. The default filter is objectclass=user, which means that only entries of the type user are searched.
6. Specify the way in which the search query will be performed for the user entry.
   • Select the Use Bind checkbox if the user logging in from the applet has permissions to perform search queries in the AD server. If a username pattern is specified in Bind username pattern, the pattern will be merged with the username supplied in the applet and the merged username will be used to connect to the AD server.

     Example: If you specify cn={0},cn=Users,dc=raritan,dc=com and TestUser has been supplied in the applet, then CC-SG uses cn=TestUser,cn-Users,dc=raritan,dc=com to connect to the AD server.

   • Select the Use Bind After Search checkbox to use the username and password you specified in the General tab to connect to the AD server. The entry is searched in the specified Base DN and is found if it meets the specified filtering criterion and if the attribute “samAccountName” is equal to the username entered in the applet. Then, a second connection is attempted using the username and password supplied in the applet. This second bind assures that the user provided the correct password.
   • Select the Follow Referrals checkbox to allow AD to follow referrals to complete a search if referral objects are encountered while CC-SG is searching the AD server.
   • Select the Enable Integrated Windows Authentication checkbox to allow user single-sign-on via IWA for users accessing CC-SG in Internet Explorer if already logged into the domain. See Setup SSO with Integrated Windows Authentication.
7. Click Next to proceed. The Groups tab opens.