ZyXEL Communications 1000 User Manual

Page of 1075
 Chapter 40 User/Group
ZyWALL USG 1000 User’s Guide
703
40.5  User /Group Technical Reference
This section provides some information on users who use an external 
authentication server in order to log in.
Setting up User Attributes in an External Server
To set up user attributes, such as reauthentication time, in LDAP or RADIUS 
servers, use the following keywords in the user configuration file. 
The following examples show you how you might set up user attributes in LDAP 
and RADIUS servers.
Creating a Large Number of Ext-User Accounts
If you plan to create a large number of Ext-User accounts, you might use CLI 
commands, instead of the Web Configurator, to create the accounts. Extract the 
user names from the LDAP or RADIUS server, and create a shell script that creates 
the user accounts. See 
 for more information about shell 
scripts.
Table 191   LDAP/RADIUS: Keywords for User Attributes
KEYWORD
CORRESPONDING ATTRIBUTE IN WEB CONFIGURATOR
type
User Type. Possible Values: admin, limited-admin, user, guest.
leaseTime
Lease Time. Possible Values: 1-1440 (minutes).
reauthTime
Reauthentication Time. Possible Values: 1-1440 (minutes).
Figure 467   LDAP Example: Keywords for User Attributes
type: admin
leaseTime: 99
reauthTime: 199
Figure 468   RADIUS Example: Keywords for User Attributes
type=user;leaseTime=222;reauthTime=222