TRITON - Web Security Help, Version 7.7 - Websense

Configure Hybrid FilteringIf your organization uses Oracle (Sun Java) Directory Server, select Settings >Hybrid Configuration > Shared User Data to refine the way that Directory Agentsearches the directory and packages user and group information for the hybrid service.ImportantTo use any version of Sun Java System Directory or OracleDirectory Server to send user and group information to thehybrid service, a Directory Agent configuration change isrequired.Open the das.ini file (located in the Websense bindirectory on the Directory Agent machine) and locate thefollowing section:# Enable next two parameters if your DSis Sun Java# GroupMembershipAttribute=uniqueMember# MemberOfAttribute=memberOfEnable the GroupMembershipAttribute andMemberOfAttribute parameters by removing the # symbolfrom the beginning of those lines, then save the file andrestart Directory Agent.1. Under Root Context for Hybrid Filtering Users, click Add to provide a RootContext to use when gathering user and group data from the directory. Narrow thecontext to increase speed and efficiency. See Adding and editing directorycontexts, page 231.Provide a context that includes only users filtered by the hybrid service.2. Under Synchronize User Data, verify the Name or IP address of the SyncService machine and the Port used for Sync Service communication (by default,55832).These fields are populated automatically, but can be updated manually, if needed.3. Click Test Connection to verify that Directory Agent can send data to SyncService. The test may take a minute or more.• If the connection is made, a success message is displayed.• If the connection cannot be made, verify the IPv4 address or hostname of theSync Service machine and the communication port. Also verify that the SyncService machine is on, that Sync Service is running, and that your networkfirewall permits connections on the Sync Service port.You can further refine the data that is sent to the hybrid service by defining patterns,or search filters, used to remove duplicate or otherwise unwanted entries from thedirectory search results. See Optimizing search results, page 233, for moreinformation.230 Websense Web Security Gateway Anywhere