LDAP authentication is a way to utilize a central user database so that there's no need to create all user accounts, and for the users that they don't have to keep track of more usernames and passwords.
The LDAP Authentication is built to work specifically for Active Directory. If you're authenticating against Active Directory, try this option first before using the Advanced LDAP authentication.
The following configuration section can be found at the bottom of the Configuration page and this controls access to the remote authentication system.
If this section is completed, every time a user logs in, they will be checked against the remote authentication server. If the user exists and their credentials match, they will be logged in. If the user does not exist in the File Transfer Appliance and their credentials match the remote authentication server, the account will automatically created. If the credentials does not match the remote authentication server, they will be matched against the local database and if the credentials match the local database the user will be logged in, and be rejected otherwise.
The configuration values for the Remote Authentication are as follows:
| Values | Example | Description | |
|---|---|---|---|
| Remote Authentication Type | LDAP / IMAP | LDAP | Choose the desired Authentication Mechanism |
| Authentication Host | hostname / ip address | 10.0.1.20 | The ip address or the hostname of the LDAP server. |
| Port | number | 389 | If the LDAP server does not use the default port, specify the port to use here. |
| Enable SSL | enable / disable | disable | If the LDAP or IMAP server uses SSL for it's connection, enable SSL here |
The following table lists the default ports for each protocol.
| Protocol | Plain (no SSL) | SSL |
|---|---|---|
| LDAP | 389 | 636 |
| IMAP | 143 | 993 |
Some people believe that the default LDAP port in Active Directory is 3268 and try to use that. Port 3268 is used for adddressbook lookups, it does not work to authenticate against - port 389 is what should be used.