Review the output of the
help set ldap
command for examples of using this command.
Example minimal configuration:
RMC cli> set ldap server=dir_server.company.com basedn="dc=company,dc=com"
Example with additional search settings for user and group:
RMC cli> set ldap server=dir_server.company.com port=636 login=uid
set ldap basedn="ou=org,dc=company,dc=com"
set ldap userdn="ou=devs,ou=org,dc=company,dc=com" userdn="ou=test,ou=org,dc=company,dc=com"
set ldap userfilter="objectClass=posixAccount"
set ldap groupdn="ou=groups,ou=org,dc=company,dc=com"
set ldap groupfilter="objectClass=posixGroup"
Example for an Active Directory server:
RMC cli> set ldap server=dir_server.company.com login=sAMAccountName
set ldap basedn="dc=company,dc=com"
set ldap userfilter="(&(objectClass=user)(!(objectClass=computer))"
set ldap groupfilter="objectClass=group"
set ldap sid=S-1-5-21-3623811015-3361044348-30300820
Example for server that requires a bind name and password:
RMC cli> Set bindpw to be prompted for a bind password (if not in script mode)
set ldap server=dir_server.company.com port=636 login=uid
set ldap basedn="dc=company,dc=com" binddn="cn=admin,dc=company,dc=com"
set ldap bindpw
Please enter the bind password: _
Default values if not set:
port = 636
login = uid
userfilter = "(objectClass=posixAccount)"
groupfilter = "(objectClass=posixGroup)"
The login parameter is the name of the LDAP attribute that contains the unique identifier of the LDAP entry which will be
used as the username.
There are two supported ways of establishing group membership in an LDAP group entry; either by a
memberUid or a
member attribute.
• The
memberUid attribute contains a username which is used to search for the corresponding LDAP user entry.
• The
member attribute contains LDAP DNs which identify a user or nested group.
If group membership is provided by the
memberUid attributes, the value of a memberUid must match the value of the
login parameter; for example, the username must be added as a
memberUid of a group entry. If member attributes are
used, then user entries are fully identified by the DN values without regard for the username.
NOTE: The space character for the DN string can be included by replacing space with
\20
( for example. backslash
followed by the digits two and zero). In the following example, DN with OU customer service org is represented as
customer\20service\20org
.
set ldap
groupdn="ou=groups,ou=customer\20service\20org,dc=company,dc=com"
More information
Configuring LDAP server details
Managing HPE Superdome Flex Server
37
