LEGRAND 1U, Руководство пользователя

Страница: 386 / 543

Janu
ary 201
9
386 Legrand PDU User Guide
Variables:

<filter> is the user search subfilter you specify.

<bind_DN> is bind DN.

<AD_domain> is the Active Directory Domain.

<verify_cert> is one of the options:
true
or
false
.
Option Description
true
Enable the verification of the LDAP server
certificate.
false
Disable the verification of the LDAP server
certificate.

<allow_exp_cert> is one of the options:
true
or
false
.
Option Description
true
Certificates that are either expired or not valid yet
are all accepted.
false
Only valid certificates are accepted.
Illustrations of Adding LDAP Servers
This section shows several LDAP command examples. Those words highlighted in bold are required for their
respective examples.

An OpenLDAP server:
config:#
authentication ldap add op-ldap.raritan.com 389
openldap
none
anonymousBind dc=raritan,dc=com
uid inetOrgPerson

A Microsoft Active Directory server:
config:#
authentication ldap add ac-ldap.raritan.com 389
activeDirectory
none
anonymousBind dc=raritan,dc=com
sAMAccountName user adDomain
raritan.com

An LDAP server with a TLS certificate uploaded:
a. Enter the CLI command with the following two TLS-related options set and/or added:

<security> is set to tls or startTls.

The "verifyServerCertificate" parameter is added to the command and set to "true."
config:#
authentication ldap add ldap.raritan.com 389 openldap
startTls
...
inetOrgPerson
verifyServerCertificate true
b. The system now prompts you to enter the certificate's content.
c. Type or copy the certificate's content in the CLI and press Enter.
Note: The certificate's content is located between the line containing "BEGIN CERTIFICATE" and the line
containing "END CERTIFICATE".

An LDAP server with the bind DN and bind password configured:
a. Enter the CLI command with the "bindDN" parameter and its data added.