Configuring eDirectory Agent settings

Using eDirectory Agent | Web Protection Solutions | v8.4.x, v8.5.x | 29-Apr-2022

Use the Settings > General > User Identification page in the Web Security module of the Forcepoint Security Manager to review and edit eDirectory Agent configuration information.

To edit settings for an eDirectory Agent instance:

Use the Transparent Identification Agents table to select the IP address or hostname of the eDirectory Agent instance that you want to configure.

If you have installed a new eDirectory Agent instance that does not appear in the list, click Add Agent, then select eDirectory Agent from the drop-down list.

Under Basic Agent Configuration, enter or verify the IPv4 address or hostname of the eDirectory Agent machine.


	Note Hostnames must start with an alphabetical character (a-z), not a numeric or special character. Hostnames containing certain extended ASCII characters may not resolve properly. To avoid this issue, enter an IP address instead of a host name.

Enter the Port that eDirectory Agent should use to communicate with other web protection components. (30700, by default).

To establish an authenticated connection between Filtering Service and eDirectory Agent, select Enable authentication, and then enter a Password for the connection.

Next, customize global eDirectory Agent communication settings. By default, changes that you make here affect all eDirectory Agent instances. Settings marked with an asterisk (*), however, can be overridden in an agent's configuration file to customize the behavior of that agent instance (see Custom configuration for an eDirectory Agent instance).

Under eDirectory Server, specify a Search base (root context) for eDirectory Agent to use as a starting point when searching for user information in the directory.

Provide the administrative user account information that eDirectory Agent should use to communicate with the directory:

Enter the Administrator distinguished name for a Novell eDirectory administrative user account.

Enter the Password used by that account.

Specify a User entry timeout interval to indicate how long entries remain in the agent's user map.

This interval should be approximately 30% longer than a typical user logon session. This helps prevent user entries from being removed from the map before the users are done browsing.

Typically, the default value (24 hours) is recommended.


	Note In some environments, instead of using the User entry timeout interval to determine how frequently eDirectory Agent updates its user map, it may be appropriate to query the eDirectory Server at regular intervals for user logon updates. See Enabling full queries.

Add the eDirectory Server master, as well as any replicas, to the eDirectory Replicas list. To add an eDirectory Server master or replica to the list, click Add, and the follow the instructions in Adding an eDirectory server replica.

When you are finished making configuration changes, click OK to return to the User Identification page, then click OK again to cache your changes. Changes are not saved until you click Save and Deploy.