Apr 16, 2012
4343
For most AD setups the following will work. You will need to know the AD domain name.
Tip:
If you dont have the AD domain name, it can be found by opening a Command Prompt on a computer that is currently logged into the AD and typing
echo %USERDNSDOMAIN%
Configure a LDAP server with the following (assuming the AD domain name is tenmiles.com)
- Configuration Name: (this will be shown on the login page dropdown - use something that your users can identify the login mode with)
- Hostname: tenmiles.com
- SSL: (leave as No)
- Port Number: (leave empty, the default port 389 will be used)
- Bind RDN: {{user_name}}@tenmiles.com
- Search Base DN: dc=tenmiles,dc=com
- Search Filter: sAMAccountName={{user_name}}
(also see attached screenshot)
Tips:
a) If only member of a particular AD group should be allowed to login, use the following for Search Filter (assuming the group name is Help Desk Staff)
(&(sAMAccountName={{user_name}})(memberOf=CN=Help Desk Staff,OU=Staff,DC=tenmiles,DC=com))