Unlike the NTLM or Kerberos method, this method uses the LDAP protocol (port 389 or 686) to verify user credentials.
This method is not "silent" because it does not care if the workstation belongs to the Windows domain.
This means that a message box will appear asking your users to enter their credentials.
This feature is available in Artica v4.40 Service Pack 14
As you can see, the disadvantage of this method is that it forces users to enter their credentials to access the Internet even if they are part of the Windows domain.
Conversely, this method offers additional advantages over the NTLM or Kerberos methods.
- You can connect multiple Active Directory servers to the same proxy.
- Clients do not need to be joined to the Windows domain to identify themselves (Linux, Mac, Apple, Android)
- Your Artica server did not need to be joined to the Active Directory domain ( only an LDAP connection is required )
¶ A) Enable the feature
- You need first to Install the Active Directory feature.
- On the left menu, choose “
Active Directory” > “LDAP Authentication” - Click on the Activate button on the grey widget
- The widget turns into green and if you have Active Directory LDAP connections defined, users can be authenticated.
- Verify your LDAP connections and add some connections if it is required.
- On the left menu, the
Active Directory>Status - You will see the number of Authentication requests and graphics about the trend of user's authentications
