HP FlexNetwork MSR Series Command Reference Manual page 162

Usage guidelines
This command is effective only after the login-dn command is configured.
Examples
# Specify the administrator password as abcdefg in plaintext form for LDAP server ccc.
<Sysname> system-view
[Sysname] ldap server ccc
[Sysname-ldap-server-ccc] login-password simple abcdefg
Related commands
display ldap scheme
login-dn
map
Use map to configure mapping entries in an LDAP attribute map.
Use undo map to delete the specified mapping entries from the LDAP attribute map.
Syntax
map ldap-attribute ldap-attribute-name [ prefix prefix-value delimiter delimiter-value ]
aaa-attribute { user-group | user-profile }
undo map [ ldap-attribute ldap-attribute-name ]
Default
An LDAP attribute map does not contain mapping entries.
Views
LDAP attribute map view
Predefined user roles
network-admin
Parameters
ldap-attribute
ldap-attribute-name argument is a case-insensitive string of 1 to 63 characters. If you do not specify
this option in the undo map command, the command deletes all mapping entries from the LDAP
attribute map.
prefix prefix-value delimiter delimiter-value: Specifies a partial value string of the LDAP attribute for
attribute mapping. The prefix-value argument represents the position where the partial string starts.
The prefix is a case-insensitive string of 1 to 7 characters, such as cn=. The delimiter-value
argument represents the position where the partial string ends, such as a comma (,). If you do not
specify the prefix prefix-value delimiter delimiter-value option, the mapping entry uses the entire
value string of the LDAP attribute.
aaa-attribute: Specifies an AAA attribute.
user-group: Specifies the user group attribute.
user-profile: Specifies the user profile attribute.
Usage guidelines
Because the device ignores unrecognized LDAP attributes, configure the mapping entries to include
important LDAP attributes that should not be ignored.
An LDAP attribute can be mapped only to one AAA attribute. Different LDAP attributes can be
mapped to the same AAA attribute.
ldap-attribute-name: Specifies an LDAP
144
attribute by its name. The