Specifying Domain Name

Unless the type of authentication that you wish to specify is INTERNAL, the authentication configuration requires a domain name. This is the domain name that is used to address the users who are authenticated against the specified user repository.

Important:

When working with LDAP, the domain name should be the name of a specific domain controller (DC) node in the LDAP tree structure. There can be many DC nodes in an LDAP tree structure, and you must select the DC node that is the deepest ancestor node (parent, grandparent, and so on) of all of the user nodes. Here, deepest means furthest away from the LDAP tree's root node. For example, if the usernames in an LDAP tree structure are located in the LDAP path uid=Username,ou=People,dc=mydomain,dc=com, then both dc=mydomain and dc=com are ancestor DC nodes of the user nodes, but since dc=mydomain is deeper than dc=com, you should specify the domain name as MYDOMAIN and not COM. If the path to the user nodes does not include any DC nodes, specify the root node. For example, if a user's full path is cn=Username,ou=People,ou=RnD,o=Company, set the domain name to Company.

The domain name for an authentication configuration of type Internal is always INTERNAL. Since this name is fixed, there can be only one such configuration defined per instance of the CentraSite registry.