Configuring eDirectory Agent

Web Security Help | Web Security Solutions | Version 7.8.x

Related topics:

Transparent identification

Manual authentication

Configuring user identification methods

eDirectory Agent

Configuring eDirectory Agent to use LDAP

Use the User Identification > eDirectory Agent page to configure a new instance of eDirectory Agent, as well as to configure the global settings that apply to all instances of eDirectory Agent.

To add a new instance of eDirectory Agent:

Under Basic Agent Configuration, enter the IPv4 address or hostname of the eDirectory Agent machine.


	Note Machine names must start with an alphabetical character (a-z), not a numeric or special character. Machine names containing certain extended ASCII characters may not resolve properly. In non-English environments, enter an IP address instead of a name.

Enter the Port that eDirectory Agent should use to communicate with other Websense components (30700, by default).

To establish an authenticated connection between Filtering Service and eDirectory Agent, select Enable authentication, and then enter a Password for the connection.

Next, customize global eDirectory Agent communication settings:

Under eDirectory Server, specify a Search base (root context) for eDirectory Agent to use as a starting point when searching for user information in the directory.

Provide the administrative user account information that eDirectory Agent should use to communicate with the directory:

Enter the Administrator distinguished name for a Novell eDirectory administrative user account.

Enter the Password used by that account.

Specify a User entry timeout interval to indicate how long entries remain in the agent's user map.

This interval should be approximately 30% longer than a typical user logon session. This helps prevent user entries from being removed from the map before the users are done browsing.

Typically, the default value (24 hours) is recommended.


	Note In some environments, instead of using the User entry timeout interval to determine how frequently eDirectory Agent updates its user map, it may be appropriate to query the eDirectory Server at regular intervals for user logon updates. See Enabling full eDirectory Server queries.

Add the eDirectory Server master, as well as any replicas, to the eDirectory Replicas list. To add an eDirectory Server master or replica to the list, click Add, and the follow the instructions in Adding an eDirectory server replica.

When you are finished making configuration changes, click OK to return to the Settings > User Identification page, then click OK again to cache your changes. Changes are not saved until you click Save and Deploy.