close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

active-directory-access

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

active-directory-access {
    authentication-entry-timeout (Services User Identification) minutes;
    domain name {
        domain-controller domain-controller-name {
            address domain-controller-address;
        }
        ip-user-mapping {
            discovery-method {
                wmi {
                    event-log-scanning-interval seconds;
                    initial-event-log-timespan hours;
                }
            }
        }
        user (System Services){
            user-name;
            password password;
        }
        user-group-mapping {
            ldap {
                address name {
                    port port;
                }
                authentication-algorithm simple;
                base base;
                ssl;
                user {
                    user-name;
                    password password;
                }
            }
        }
    }
    filter {
        exclude name;
        include name;
    }
    firewall-authentication-forced-timeout minutes;
    invalid-authentication-entry-timeout minutes;
    no-on-demand-probe;
    traceoptions (Active Directory Access) {
        file filename files files match match size size (world-readable | no-world-readable);
        flag name;
        level (all | error | info | notice | verbose | warning);
        no-remote-trace;
    }
    wmi-timeout seconds;
}

Hierarchy Level

content_copy zoom_out_map
[edit services user-identification]

Description

Identify the domain and domain controllers where the integrated user firewall feature is implemented; configure the IP address-to-user mapping information and the user-to-group mapping information for accessing the LDAP server.

Options

authentication-entry-timeout	Authentication entry timeout number. Range: 10 through 1440 minutes
firewall-authentication-forced-timeout	Firewall authentication fallback authentication entry forced timeout number. Range: 10 through 1440 minutes
invalid-authentication-entry-timeout	Invalid authentication entry timeout number. Range: 10 through 1440 minutes
no-on-demand-probe	Disable on-demand probe.
wmi-timeout	Windows Management Instrumentation (wmi) timeout number. Range: 3 through 120 seconds

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.1X47-D10.

arrow_backward PREVIOUS active

NEXT arrow_forward active-interface (VPLS Multihoming)

Junos CLI Reference

ON THIS PAGE

active-directory-access

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

active-directory-access

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch