-48 VDC Remote Power Manager
Advanced Operations
125
Installation and Operations Manual
Setting the LDAP bind type:
The Set LDAP Bind command specifies the LDAP bind request that authenticates a client with the LDAP server.
The CDU supports three standard LDAP bind methods:
Simple:
Uses unencrypted delivery of username-password over the network to the LDAP server for authentication,
showing user credentials in plain text.
LDAP over
TLS/SSL:
Uses a trusted authority certificate to provide encryption of LDAP authentication.
MD5:
Provides strong protection using 1-way hash encoding that does not transmit the username-password over the
network.
To set the bind type:
At the Switched -48 VDC prompt: type
set ldap bind
, followed by
simple
,
TLS
,
or
md5
, and press
Enter
.
NOTE:
If MD5 binding is enabled, LDAP over TLS/SSL is disabled.
Setting the search bind Distinguished Name (DN):
The Set LDAP BindDN command sets distinguished name (DN) for user accounts to bind with. This is required for
directory services that do not support anonymous binds. This field is used only with Simple binds. Maximum string
length is 124 characters.
NOTE:
If left blank, then an anonymous bind will be attempted. This field is used
only
with Simple binds.
To set the search bind DN:
At the Switched -48 VDC: prompt, type
set ldap binddn
, and press
Enter
. At the following prompt, type the DN and
press
Enter
.
Example
The following sets the DN for MSAD to ‘cn=guest,cn=Users,dc=servertech,dc=com’:
Switched -48 VDC: set ldap binddn<Enter>
Enter Search Bind DN (Max characters 124):
cn=guest,cn=Users,dc=servertech,dc=com<Enter>
Setting the search bind Distinguished Name (DN) password:
The Set LDAP BindPW command sets the password for the user account specified in the Search Bind DN.
Maximum password size is 20 characters.
To set the Bind Password DN:
At the Switched -48 VDC: prompt, type
set ldap bindpw
and press
Enter
.
At the following prompt, type the bind
password and press
Enter
.
Setting the group membership attribute:
The Set LDAP GroupAttr command specifies the name of user class attributes that lists distinguished names (DN), or
names of groups that a user is a member of. Maximum string length is 30 characters.
To set Group Membership Attribute:
At the Switched -48 VDC: prompt, type
set ldap groupattr
and press
Enter
.
At the following prompt,
type the group
membership attribute and press
Enter
.
Example
The following sets the group membership attribute for MSAD to ‘memberof’:
Switched -48 VDC: set ldap groupattr<Enter>
Enter Group Member Attr (Max character 30):
memberof<Enter>
