Cisco 500 Series, Configuration Manual

Page: 1065 / 1140

E-15
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Appendix E Configuring an External Server for Authorization and Authentication
Configuring an External LDAP Server
Example Security Appliance Authorization Schema
This section provides a sample of an LDAP schema. This schema supports the security appliance class
and attributes. It is specific to the Microsoft Active Directory LDAP server. Use it as a model, with
Table E-2 , to define your own schema for your own LDAP server.
Schema 3k_schema.ldif
dn: CN=Access-Hours,CN=Schema,CN=Configuration,OU=People,DC=ExampleCorporation,DC=com
changetype: add
adminDisplayName: Access-Hours
attributeID: 1.2.840.113556.1.8000.795.2.1
attributeSyntax: 2.5.5.3
cn: Access-Hours
instanceType: 4
isSingleValued: TRUE
lDAPDisplayName: Access-Hours
distinguishedName:
CN=Access-Hours,CN=Schema,CN=Configuration,OU=People,DC=ExampleCorporation,DC=com
objectCategory:
CN=Attribute-Schema,CN=Schema,CN=Configuration,OU=People,DC=ExampleCorporation,DC=com
objectClass: attributeSchema
oMSyntax: 27
name: Access-Hours
showInAdvancedViewOnly: TRUE
deny Action Denies action. (Default)
permit Action Allows action.
icmp Protocol Internet Control Message Protocol (ICMP)
1 Protocol Internet Control Message Protocol (ICMP)
IP Protocol Internet Protocol (IP)
0 Protocol Internet Protocol (IP)
TCP Protocol Transmission Control Protocol (TCP)
6 Protocol Transmission Control Protocol (TCP)
UDP Protocol User Datagram Protocol (UDP)
17 Protocol User Datagram Protocol (UDP)
any Hostname Rule applies to any host.
host Hostname Any alpha-numeric string that denotes a hostname.
log Log When the event is hit, a filter log message appears. (Same as permit and log or
deny and log.)
lt Operator Less than value
gt Operator Greater than value
eq Operator Equal to value
neq Operator Not equal to value
range Operator Inclusive range. Should be followed by two values.
Table E-4 Security Appliance-Supported Tokens
Token Syntax Field Description