Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/index.html?contextId=AddeDirectoryServer

Add an eDirectory server

To add an eDirectory server, do as follows:

  1. Go to Authentication > Servers and click Add.
  2. From the Server type list, select eDirectory.
  3. Enter a name.
  4. Type an IP address and port.

  5. Specify the settings.

    Option Description
    Bind DN DN to use for authentication. Must be specified as a distinguished name (DN) in LDAP syntax.
    Password Password for the server.
    Connection security Connection security for the server.
    Note: We recommend you use encryption.
    Select one of the following:
    • Plaintext: Send user credentials as unencrypted plain text.
    • SSL/TLS: Use Secure Sockets Layer/Transport Layer Security to encrypt the connection.
    • STARTTLS: Upgrade a non-encrypted connection by wrapping it with SSL/TLS after or during the connection process. Uses the default port.
    Validate server certificate Validates the certificate on the external server for a secured connection.
    Client certificate Client certificate to use for establishing a secure connection.
    Note: To manage client certificates, go to Certificates.
    Base DN Base distinguished name (DN) for the server. The Base DN is the starting point relative to the root of the directory tree, where users are specified. Must be specified as a distinguished name (DN) in LDAP syntax. For example, O=Example,OU=RnD.
    Tip: Click Get base DN to get the Base DN from the directory.

  6. Click Test connection to validate the user credentials and check the connection to the server.

  7. Click Save.
  8. Go to Authentication > Services and select servers to use for service authentication.