Network interface settings

The connection to the MetaDirectory is via network interfaces.

Type

The following types of network interfaces are available:

The Administration is the application to configure MetaDirectory.

With LDAP clients may send phonenumber- or contact searchrequests to MetaDirectory.

LDAPS like LDAP over an encrypted TLS connection.

HTTP Webbrowsers or http-capable clients can post requests to MetaDirectory.

HTTPS like HTTP over an encrypted connection.

IP-address and port

Each network interface is bound to its own combination of IP address and port number. The IP address is set to "All available" by default. However, it is also possible to select one of the discovered IP addresses. An overview of the default port numbers can be found in the chapter Network Interfaces.

You should change the port settings only if another server software uses the same port. If port conflicts occur, you will see this on the status icon and as an error message in the event log of the estos MetaDirectory.

Encryption

The network interface may be configured with distinct security levels:

Unencrypted: the estos MetaDirectory is using the network interface unencrypted.

Starttls optional: the estos MetaDirectory is using the network interface encrypted, if available.

Starttls mandatory: the estos MetaDirectory requires using the network interface encrypted.

Default

Check this box if all connections of the actual network interface type are using these interface as standard.

Certificate for TLS connections

If the network interfaces shall be used encrypted a certificate is required.

Using the button Select certificate a certificate can be configured to be used by the network interface for authentication. If no certificate is offered the network interface can be used unencrypted or a certificate needs to be installed at the system. A short guidance around certificates can be found at the chapter certificate.

More information about certificates can also be found at the online help of the Microsoft® Management Console MMC Snap-in for certificates "certmgr.msc".

Using the button Delete certificate a selected certificate can be removed out of the list.

DNS name for the network interface

Please specify the name under which this network interface will be resolved in the DNS Domain Name System (e.g. hostname.domain.com). When the software is started for the first time, the input field suggests a name that has been determined by this configuration page.