All Products
Search

This Product

    Bastionhost:Configure AD authentication or LDAP authentication

    Document Center

    Bastionhost:Configure AD authentication or LDAP authentication

    Last Updated:Jun 30, 2023

    Bastionhost can be connected to an Active Directory (AD) server or a Lightweight Directory Access Protocol (LDAP) server. Users on the AD server or the LDAP server can be synchronized to Bastionhost as Bastionhost users. This topic describes how to configure AD authentication and LDAP authentication.

    Prerequisites

    An AD environment or LDAP environment is deployed and Bastionhost can access the AD server or LDAP server.

    Procedure

    1. Log on to the console of your bastion host. For more information, see Log on to the console of a bastion host.
    2. In the left-side navigation pane, click System Settings.

    3. On the AD Authentication or LDAP Authentication tab, enter the basic information about the AD server or LDAP server. Then, click Test Connection.

      If the test is successful, a message appears, which indicates that the operation is successful.

    4. After the connection is established, click Save.

      • To clear the configurations of AD or LDAP authentication, click Clear Settings.

        Warning

        After you clear the configurations of AD or LDAP authentication, AD or LDAP users are also cleared. Proceed with caution.

      • If you want Bastionhost to synchronize the snapshots of AD- or LDAP-authenticated users, click Create User Snapshots or configure the Interval for Automatic Creation of User Snapshots parameter to synchronize users from the AD or LDAP server to local snapshots. When AD- or LDAP-authenticated users are imported, Bastionhost reads user information from the local snapshots. This reduces the performance overheads.