pdp ad

General Syntax

pdp ad

      associate <options>

      disassociate <options>

The 'pdp ad associate' command

Description

For the AD Query, adds an identity to the Identity Awareness database on the Security Gateway.

The group data must be in the AD.

Syntax

pdp ad associate ip <IP Address> u <Username> d <Domain> [m <Computer Name>] [t <Timeout>] [s]

Parameters

Parameter

Description

ip <IP Address>

Specifies the IP address for the identity.

u <Username>

Specifies the username for the identity.

d <Domain>

Specifies the Domain of the ID server.

m <Computer Name>

Specifies the computer that is defined for the identity.

t <Timeout>

Specifies the timeout for the AD Query.

Default timeout is 5 hours.

s

Associates the "u <Username>" and the "m <Computer>" parameters sequentially.

First, adds the "<Computer>" and then adds the "<Username>" to the database.

The 'pdp ad disassociate' command

Description

For the AD Query, removes the identity from the Identity Awareness database on the Security Gateway.

Identity Awareness does not authenticate a user that is removed.

Syntax

pdp ad disassociate ip <IP Address> {u <Username> | m <Computer Name>} [r {override | probed | timeout}]

Parameters

Parameter

Description

ip <IP Address>

Specifies the IP address for the identity.

u <Username>

Specifies the username for the identity.

m <Computer Name>

Specifies the computer that is defined for the identity.

r {override | probed | timeout}

Specifies the reason to show in SmartConsole on the Logs & Monitor > Logs tab.