欢迎阅读有关UserGate产品的系列文章的第四期。在本文中，我们将研究如何在UserGate设备上创建本地用户，如何添加LDAP连接器以连接到Microsoft Active Directory，以及如何配置强制门户。
, , - , .
UserGate ( ). . :
LDAP-;
Radius;
TACACS+;
Kerberos;
NTLM;
SAML (SSO).
UserGate :
Unknown — , ;
Known — , ;
Any — ( Known Unknown);
— , .
captive-. UserGate , kerberos. , .
, , :
— . Captive-, .
IP- , MAC- MAC IP-. , MAC / IP-.
VLAN ID VLAN. , VLAN.
. , , , 2- .
, , , IP/MAC/VLAN , , .
:
LDAP-
Active Directory LDAP-, Captive-. “ ” “” “ LDAP-”.
“ LDAP” “”, , LDAP IP-. “Bind DN («login»)” ( , ), LDAP. DOMAIN\username username@domain. , “ LDAP” , , Captive- .
, , - . “Kerberos keytab” keytab-. Kerberos, UserGate Kerberos, kerberos, LDAP.
Captive-
Captive- (Unknown users), , Windows IP-. , Captive- SMS e-mail.
Captive- HTTP HTTPS. .. , HTTP HTTPS.
Captive- :
, — (LDAP-).
Captive-:
, . UserGate :
IP-. IP- , NAT- UserGate.
cookie. cookie. , NAT-, HTTP(S) , Captive-. , cookie, Unknown user.
captive- .
Captive- , , .
captive- Captive-, .
, , URL http://logout.captive “”.
, LDAP- UserGate Microsoft Active Directory, captive-. SSL- HTTP HTTPS .
(Telegram, Facebook, VK, TS Solution Blog)!