Using the Administration Console > Set up Active Directory/LDAP connection

Set up Active Directory/LDAP connection

You must set up a connection to your Active Directory or other LDAP service in order to support off-site user authentication.

Note  If you have Active Directory, local user authentication is routed through Kerberos, but if you are using a different LDAP service, local user authentication will also use the LDAP directory rather than Kerberos.

1.	In Horizon Connector, go to Configure > Authentication.

 

1.	Select your Directory type, either Active Directory or LDAP as appropriate.

2.	In the Server 1 field, enter the IP address and port of your directory server.

 

Note  Do not edit the Search attribute field. This must always be set to the default of sAMAccountName.

3.	In the Base DN field, enter the DN at which to start account searches. For example, to search in Users in the domain accounts.example.com, you would enter:

cn=Users,dc=accounts,dc=example,dc=com

4.	In the Bind DN field, enter the account that has the permissions to search for users. For example, for an account belonging to your IT administrator, you might enter:

cn=ITAdmin,cn=Users,dc=accounts,dc=example,dc=com

 

Note  If one of the fields in your Bind DN contains a comma, it must be escaped with 2 backslashes for the Administration Console to accept it. For example: cn=Smith\\,Joe,cn=Users,dc=accounts,dc=example,dc=com

5.	In the Bind password field, enter the password for the Bind DN account.

6.

Optionally, in the Session timeout URL field, enter http://proxy-login.blackspider.com/sessiontimeout. This page is displayed to an end user if they leave their browser open and idle and their authentication session times out, and they then try to browse again. The page tells the user to retry their original request, which prompts the re-authentication.

If you do not enter this URL in the field, by default Authentication Service displays a page containing a link. The link takes the end user to a page showing their user credentials.

7.	Click Save and Restart.

Using the Administration Console > Set up Active Directory/LDAP connection