Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > User configuration and identification issues > User Service on an appliance or Linux server
User Service on an appliance or Linux server
Administrator Help | TRITON AP-WEB and Web Filter & Security | Version 8.3.x
If you plan to apply policies to individual users and groups in your network, and User Service runs on an appliance or Linux server, special configuration steps are required when you:
*
Use Active Directory in mixed mode
*
Want to use Logon Agent to transparently identify users via Active Directory in native mode
*
Want to use DC Agent to transparently identify users
In these environments, web protection software must be configured to communicate with a Windows Internet Name Server (WINS) to resolve domain names to domain controller IP addresses. The precise steps vary, depending on your environment.
If your network uses Windows Active Directory in mixed mode:
1.
In the TRITON Manager, go to the Web > Settings > General > Directory Services page.
2.
Select Windows Active Directory (Mixed Mode). This is the default option.
3.
Enter the name and password for the administrative user.
4.
Enter the Domain name.
If your organization uses multiple domains, enter the name of a domain that is trusted by all domains that authenticate your users.
5.
Enter the IP address of a Windows Internet Name Server (WINS) that can resolve the domain name entered above to a domain controller IP address.
6.
Click OK to cache your changes. Changes are not implemented until you click Save and Deploy.
If your network uses Active Directory (Native Mode), and you need to configure WINS settings:
1.
Go to the Settings > General >Directory Services page.
2.
Provide administrative credentials and identify the Windows Internet Name Server (WINS), as follows.
a.
Select Windows Active Directory (Mixed Mode), which is the default.
b.
Enter the name and password for the administrative user.
c.
Enter the Domain name.
If your organization uses multiple domains, enter the name of a domain that is trusted by all domains that authenticate your users.
d.
Enter the IP address of a Windows Internet Name Server (WINS) that can resolve the domain name entered above to a domain controller IP address.
e.
Click OK to cache your changes.
f.
Click Save and Deploy to implement these changes.
3.
On the Directory Service page, select Active Directory (Native Mode).
4.
Configure the global catalog servers and other settings for your directory service. See Connecting to Windows Active Directory (Native Mode) for assistance.
5.
Click OK to cache your changes. Changes are not implemented until you click Save and Deploy.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > User configuration and identification issues > User Service on an appliance or Linux server
Copyright 2016 Forcepoint LLC. All rights reserved.