Configuring global authentication settings

Use this page to control the common behavior, irrespective of the authentication method used.

Procedure

  1. On the SERVICES menu, under the Authentication submenu, click Settings.
  2. Under the Settings section:
    • To log the user out after a period of inactivity enter the Login timeout (minutes) duration. The default time-out is 10 (minutes).
    • To limit the number of logins attempted per a user, for the Concurrent login session, either select the No limit option or enter how many times the user can attempt to log in.
    • To just log the user login and LDAP server information, select a "Normal" Logging level or to log request, response and result information, select "Verbose".
      • Normal - Logs user login and LDAP server information.
      • Verbose - As Normal, but also request, response and result information. This is useful when troubleshooting authentication issues.
    • To normalize all variations of username and domain in the same format, select the Enabled option for Normalize usernames.
      • Determines whether all variations of username and domain are normalized into the same format. For example, Active Directory prefers DOMAIN\user, but can accept user, user@domain.com, DOMAIN.COM\user, DOMAIN\user. The Smoothwall stores the user-supplied username in the configured directory server’s preferred format. This reduces the number of forms of a username to one, preventing users circumventing temporary bans by using a different format of username for example. If you're migrating configuration from another Smoothwall installation, this setting is turned off by default. It ensures that log searches and reports based on usernames work correctly and any temporary bans, applied before the migration, still apply. You can then turn this feature on at a convenient time.
    • To create Smoothwall Firewall rules for groups that contain bring-your-own-device (BYOD) clients to allow them access to other segments of your internal network, select the Enabled option for Users identified by BYOD are subject to firewall rules that make use of groups.
  3. Click Save changes.

Additional task