CommandCenter Secure Gateway - Admin Guide - Version ... - Raritan

Chapter 12: Remote Authentication
For example, if you specify cn=Groups,dc=raritan,dc=com as the
Base DN and (objectclass=group) as the Filter, then all entries that are
in the Groups entry and are of type group will be returned.
4. Click Next to proceed. The Trusts tab opens.
AD Trust Settings
In the Trusts tab, you can set up trust relationships between this new AD
domain and any existing domains. A trust relationship allows resources to
be accessible by authenticated users across domains. Trust relationships
can be incoming, outgoing, bidirectional, or disabled. You should set up
trust relationships if you want AD modules that represent different forests
in AD to be able to access information from each other. The trusts you
configure in CC-SG should match the trusts configured in AD.
1. Click the Trusts tab. If you have configured more than one AD domain,
all other domains are listed in the Trusts tab.
2. For each domain in the Trust Partner column, click the Trust Direction
drop-down menu, and then select the direction of trust you want to
establish between the domains. Trust directions are updated in all AD
modules when you make changes to one AD module.
• Incoming: information will be trusted coming in from the domain.
• Outgoing: information will be trusted going to the selected domain.
• Bidirectional: information will be trusted in both directions from
each domain.
• Disabled: information will not be exchanged between the domains.
3. Click Apply to save your changes, and then click OK to save the AD
module and exit the window.
The new AD module appears in the Security Manager screen under
External AA Servers.
4. Select the Authentication checkbox if you want CC-SG to use the AD
module for authentication of users. Select the Authorization checkbox
if you want CC-SG to use the AD module for authorization of users.
5. Click Update to save your changes.
Editing an AD Module
Once you have configured AD modules, you can edit them at any time.
To edit an AD module:
1. Choose Administration > Security.
2. Click the Authentication tab. All configured external Authorization and
Authentication Servers appear in a table.
140