In this scenario, users who are member of your Active Directory group configured in the search filter (in this example, NSG_Admin) will be able to connect to the NetScaler Management interface but will not have any privileges until you create the specific user on NetScaler and bind command policy to it. Applying Privileges Individually for Each User Just add the new administrator users to the LDAP group you configured on the search filter in Step 1.īack to top Scenario B. Note: The Group Name has to match the Active Directory record exactly. This will define the Active Directory group that the users are members of and the Command Policy level that should be associated to the account when logging in. In this scenario, users who are member of you Active Directory group configured in the search filter (in this example, NSG_Admin) will be able to connect to the NetScaler Management interface and will have superuser command policy.Īdd a new system group to the NetScaler, under System > User Administration > Groups. Creating each user administrator account and assign for each of them the correct rights.īack to top Scenario A.Adding a new group under NetScaler and assigning the same access rights for every user who are members of this group.Choose a priority accordingly (the lower the number, the higher the priority), click on Bind and then Done.īack to top 4.

Go to Global Bindings > Add Binding > Click to Select field and choose the newly created policy (in this example, pol_LDAPmgmt). Enter a name for the policy, select the server that you created in Step 1 from the drop-down menu and in the Expression text field, type true and click Create: Classic expressions (such as ns_true) used in basic authentication policies are deprecated in firmware release 13.0 and are unusable in firmware release 13.1 onward. We are using advanced authentication policies instead of basic authentication policies so we can use advanced expressions. Creating LDAP PolicyĪdd an Authentication policy from System > Authentication > Advanced Policies tab. Value used for this example is - &(memberof=CN=NSG_Admin,OU=AdminGroups,DC=Citrix,DC=lab)Īs search filter is configured, everyone who are not member of NSG_Admin group will not be able to log on to the NetScaler Management interface. In this example, we limit the access to the NetScaler by filtering the authentication on the user group membership by setting Search Filter. Creating LDAP ServerĪdd an Authentication Server from System > Authentication > LDAP > Server tab and complete the required fields as shown in the example screenshot anc click Create. To configure user logon on a NetScaler appliance (for Management purposes) complete the following tasks: 1. Assign privileges to your administrators.Overview diagram of configuring LDAP Authentication on the NetScaler Adding new administrators on the NetScaler NetScaler GUI

Netscaler policy citrix receiver login