Filter
Top Products
APPENDIX A USER/GROUP FILE FORMAT AND RULES
8E6 TECHNOLOGIES, R3000 ENTERPRISE FILTER AUTHENTICATION USER GUIDE 217
LDAP Group List Format and Rules
When setting up the “ldapgroupprofile.conf” file, each entry
must consist of the Distinguished Name (DN), with each
part of the DN separated by commas (,). The DN should be
followed by a semicolon (;), and then a rule number or rule
criteria (port, category, and filter mode specifications). A
redirect URL can be included, if a specific URL should be
used in place of the standard block page. If a redirect URL is
not included, a blank space should be entered in its place in
the profile string. Each segment of the profile string
following the semicolon for the DN should be separated by
commas (,). A zero (0) should be placed at the end of a
profile string without any filter options enabled. For
example:
CN=Sales, CN=Users, DC=qc, DC=local; Rule1, 1,
http://www.cnn.com, 0x102
NOTE: The DN format must contain the group name—and, if
applicable—user group "CN" ("common name") attribute type,
and the domain and DNS suffix "DC" ("domain component")
attribute type. The "OU" ("organizational unit") attribute type also
can be included. Each attribute type should be followed by an
equals sign (=), and separated by a comma (,).
When translated, this string of code means:
• LDAP profile for group with ID “Sales”, user group
“Users”, domain “qc”, DNS suffix “.local”: Bypass all cate-
gories, use filter mode 1, use redirect URL http://
www.cnn.com in place of the standard block page, X
Strikes Blocking and Search Engine Keyword filter
options enabled.