Connecting to the active directory

The AGW can connect to the AD using LDAPS. The domain controller is entered under ‘System Config’. The name or IP address can be used for this purpose. The fingerprint of the DC is determined by the AGW itself after a few minutes. The AGW can be configured to use LDAPS instead of LDAP.

LDAPS und AD Fingerprint

Method:

Authentication can be selected under Method. NTLM or Kerberos. Kerberos should be used, is deprecated and will be removed! If you have enabled the Channel Binding option on your Active Directory, this requires Kerberos.

Authentication Method