Configuring LDAP Server Access

To add or remove LDAP server connections for retrieving identity attributes, use the following commands:
configure ldap {domain domain_name} add server [host_ipaddr | host_name] {server_port} {client-ip client_ipaddr} {vr vr_name} {encrypted sasl digest-md5}
To create a new domain, use the following command:
create ldap domain domain_name {default}
To configure credentials for accessing an LDAP server, use the following command:
configure ldap {domain [domain_name|all]} bind-user [user_name {encrypted} password | anonymous]
To specify a base domain name to be added to usernames in LDAP queries, use the following command:
configure ldap {domain [domain_name|all]} base-dn [base_dn | none | default]
To specify a domain as default, use the following command:
configure ldap domain domain_name [default | non-default]
To enable or disable LDAP queries for specific network login types, use the following command:
configure ldap { domain [ domain_name | all ] } [enable|disable] netlogin [dot1x | mac | web-based]
To configure bind-user for LDAP queries, use the following command:
configure ldap {domain [domain_name|all]} bind-user [user_name {encrypted} password | anonymous] {domain [domain_name|all]}
To delete an LDAP server, use the following commands:
configure ldap {domain [domain_name|all]} delete server [host_ipaddr | host_name] {server_port} {vr vr_name}
To delete a domain, use the following command:
delete ldap domain [domain_name | all]

Published March 2020prev | next