NetScaler binding ad restricts access to user-LDAP configuration

Source: Internet
Author: User
Tags ldap ldap search filter netscaler netscaler gateway

NetScaler restricting user access to cloud desktops with AD
-LDAP Configuration

A Background
In the XenDesktop Cloud Desktop delivery platform, NetScaler is the most common security gateway used to deliver cloud desktops to the public network. Many times the customer's access to the Cloud Desktop public network also has a public network bandwidth and information security considerations, so you want to be able to cloud desktop public access can restrict and specify that special personnel have access.

Two Principle
When a user types credentials and presses the ENTER key on the login page of the NetScaler Gateway virtual server, NetScaler first searches for the entered user name in Active Directory (LDAP). If an LDAP search filter is not defined in LDAP policy/server, NetScaler will search all Active Directory user names to find matches. When a match is found, NetScaler extracts the user's full distinguished name (DN) and authenticates Active Directory with the user's DN and password.
If an LDAP search filter is defined, only the user name that matches the LDAP search filter is searched to find the user name match. For example, if you construct an LDAP search filter to search only members of an Active Directory group, the user name entered by the user must match the members of that group.

Three Configuration steps
3.1 Enter AD, open active Director user and computer

3.2 Click to view, open "advanced Features"

3.3 Right-click the Allowed Users group and select "Properties"

3.4 Select "Property Editor" and double click "distinguishedname"

3.5 Copying the value of a property

3.6 Log in to NetScaler's administration page, select "NetScaler gateway–virtual Servers-"

3.7 Select the virtual server on the right, click Edit;

3.8 Locate "LDAP Policy" under "Basic Authentication" and click Configure

3.9 In the Edit drop-down menu, select "Edit Server"

3.10 in the "Search Filter" box below other settings, enter "memberof=cloudusers,ou= production user, ou= user, ou= Cloud Desktop test Platform, dc=home,dc=local" (Note that " Memberof= "+" Allow access to the user group's property values "), click OK to save the configuration. To this configuration is complete.

?
Four Refer to KB links
https://support.citrix.com/article/CTX111079

NetScaler binding ad restricts access to user-LDAP configuration

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.