Integrating Data Security with Existing Infrastructure > Working with user directory servers

Working with user directory servers

Applies to

Data Security v7.6.x

In this topic

Overview

Configuring user directory server settings

Importing user data

Rearranging servers

Overview

If you have one or more user directory servers, such as Microsoft Active Directory or Lotus Domino, you should integrate your servers into Websense Data Security configuration. Once you have set up server details and imported users and groups using TRITON - Data Security, you can base your administrator login authentication on user directory credentials, resolve user details during analysis, and enhance the details displayed with the incident.

Configuring user directory server settings

You set up your user directory server settings as part of your initial Websense Data Security configuration:

1.	Open TRITON - Data Security.

2.	Select Settings > General > System.

3.	Select User Directories.

4.	Click New in the toolbar.

5.	In the Add User Directory Server dialog box, complete the following fields:

Field	Description
Name	Enter a name for the user directory server.
Enabled	Click Enabled to enable this server as your user directory server.
Type	Select the type of directory from the drop-down list: Active Directory, Lotus, Sun, or another.
Connection Settings
IP address or host name	Enter the IP address or host name of the user directory server.
Port	Enter the port number of the user directory server.
User distinguished name	Enter a user name that has access to the directory server.
Password	Enter the password for this user name.
Use SSL encryption	Select this box if you want to connect to the directory server using Secure Sockets Layer (SSL) encryption.
Follow referrals	Select Follow referrals if you want Websense Data Security to follow server referrals should they exist. A server referral is when one server refers to another for programs or data.
Test Connection	Click this button to test your connection to the user-directory server.
Directory usage
Get user attributes	Select this box if you want to retrieve user information from the directory server.
Attributes to retrieve	Enter the user attributes that you want TRITON - Data Security to collect for all users (comma separated).
Sample email address	Enter a valid email address with which you can perform a test.
Test Attributes	Click Test Attributes to retrieve user information on the email address you supplied. Mouse over the information icon to check the user information imported.

6.	Click OK to save your changes.

The server is listed on the User Directories page.

Importing user data

By default, Websense Data Security imports data from user directory servers daily at 3.00am. You can change the import time as follows:

1.	In TRITON - Data Security, select Settings > General > System.

2.	Select User Directories.

3.	Click the Import daily at link.

4.	Set a new time and click OK.

Once you have set up a user directory server, you can start an import at any time in addition to the daily schedule:

1.	On the User Directories page, select the server and click Import Now.

2.	Click Yes to continue.

To view user directory entries once they have been imported, go to Main > Policy Management > Resources and select User Directory Entries.

Rearranging servers

Once you have set up a user directory server in TRITON - Data Security, the server is listed on the User Directories page. If you have set up and enabled more than one server, users are imported from user directories in the order listed on this page. If a user is in more than one directory, the first directory record takes precedence.

To rearrange your servers in the order you want them:

1.	Click Rearrange Servers.

2.	Select a server, and use the arrow buttons to move it up or down the list.

3.	Click OK when done.

Integrating Data Security with Existing Infrastructure > Working with user directory servers