42
To configure LDAP user attributes:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter LDAP server view.
ldap server
server-name
N/A
3.
Specify the user search base
DN.
search-base-dn base-dn
By default, no user search base
DN is specified.
4.
(Optional.) Specify the user
search scope.
search-scope
{
all-level
|
single-level
}
By default, the user search scope
is
all-level
.
5.
(Optional.) Specify the
username attribute.
user-parameters
user-name-attribute
{
name-attribute
|
cn
|
uid
}
By default, the username attribute
is
cn
.
6.
(Optional.) Specify the
username format.
user-parameters
user-name-format
{
with-domain
|
without-domain
}
By default, the username format is
without-domain
.
7.
(Optional.) Specify the user
object class.
user-parameters
user-object-class
object-class-name
By default, no user object is
specified, and the default user
object class on the LDAP server is
used.
The default user object class for
this command varies by device
model.
Creating an LDAP scheme
You can configure a maximum of 16 LDAP schemes. An LDAP scheme can be used by multiple ISP
domains.
To create an LDAP scheme:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create an LDAP scheme
and enter LDAP scheme
view.
ldap scheme
ldap-scheme-name
By default, no LDAP scheme is defined.
Specifying the LDAP authentication server
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter LDAP scheme view.
ldap scheme
ldap-scheme-name
N/A
3.
Specify the LDAP
authentication server.
authentication-server
server-name
By default, no LDAP authentication
server is specified.
Displaying and maintaining LDAP
Execute
display
commands in any view.
