Adding a LDAP server connection

You can add a connection with one or several LDAP servers.

If you are configuring integration with a domain whose name contains the root domain .local, you must complete the following steps to prepare the operating system for successful connection with the LDAP server.

To add a LDAP server connection:

In the application web interface window, select the Settings → External services → LDAP server connection section.
Click Add.
The Add connection window opens.
In the Name text box, type the name of the LDAP server that will be displayed in Kaspersky Web Traffic Security web interface.
In the Keytab file block of settings, click Upload to load a keytab file.
File containing pairs of unique names (principals) for clients that are allowed to use Kerberos authentication, and encrypted keys derived from the user password. Keytab files are used in systems with Kerberos support to authenticate users without having to enter a password.

The file selection window opens.
Select the keytab file and click Open.
In the Search base (Base DN) text box, enter the DN (Distinguished Name) of the directory object that is used by Kaspersky Web Traffic Security as the starting point for record lookup.
Enter the directory suffix in the following format: ou=<name of the department> (if applicable), dc=<domain name>, dc=<parent domain name>.

For example, you can enter ou=people, dc=example, dc=com.

Here, people is the level in the directory schema from which Kaspersky Web Traffic Security looks up records (the search is performed at level people and below. Objects above that level are excluded from the search), example is the domain name of the directory in which Kaspersky Web Traffic Security looks up records, and com is the name of the parent domain in which the directory is located.
Click Add.

The LDAP server connection is added.