Configuring an Active Directory Server using the configuration menu

Use the menu options in this section to configure Active Directory authentication. Because Active Directory (AD) supports the LDAP protocol, the NDR appliances can also authenticate through an AD server.

The binding user or bind-dn in the NDR configuration is a read-only user that is used to query the directory structure starting from the base-dn.

To configure Active Directory authentication:

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter configuration CAC mode.
npadmin@ia(config)# authorization
In the CAC/PIV configuration menu, select 5 to configure AD. The AD configuration menu appears.
Select 1 to configure an LDAP server and host to send LDAP authentication requests. Use the hostname or IP address of the AD server. Press Enter.
Select 13 to choose the type of encryption (TLS or STARTTLS) for secure connections between the appliance and the Web browser running the Web UI, and to verify remote servers for various client applications. STARTTLS takes an existing insecure connection and upgrades it to a secure connection using SSL/TLS. Press Enter.
Select 6 to configure the LDAP user search base (for example, [DC=testad,DC=eng,DC=fireeye,DC=com]). Press Enter.
Select 2 to set the Distinguished Name used to bind to the server (for example, [CN=engpxbind,OU=UtilityAccounts,OU=Engineering,DC=testad,DC=eng,DC=fic=com]). Press Enter.
Select 4 to configure the credentials used to bind to the server (for example, P2ssw0rd!). Press Enter.
Select S to save your settings and exit the menu.