HP FlexNetwork 7500 Series Command Reference Manual page 166

[Sysname] ldap server ccc
[Sysname-ldap-server-ccc] login-password simple abcdefg
Related commands
display ldap scheme
login-dn
map
Use map to configure a mapping entry in an LDAP attribute map.
Use undo map to delete the specified mapping entries from the LDAP attribute map.
Syntax
map ldap-attribute ldap-attribute-name [ prefix prefix-value delimiter delimiter-value ]
aaa-attribute user-group
undo map [ ldap-attribute ldap-attribute-name ]
Default
An LDAP attribute map does not contain mapping entries.
Views
LDAP attribute map view
Predefined user roles
network-admin
mdc-admin
Parameters
ldap-attribute
ldap-attribute-name argument is a case-insensitive string of 1 to 63 characters.
prefix prefix-value delimiter delimiter-value: Specifies a partial value string of the LDAP attribute for
attribute mapping. The prefix-value argument represents the position where the partial string starts.
The prefix is a case-insensitive string of 1 to 7 characters, such as cn=. The delimiter-value
argument represents the position where the partial string ends, such as a comma (,). If you do not
specify the prefix prefix-value delimiter delimiter-value option, the mapping entry uses the entire
value string of the LDAP attribute.
aaa-attribute: Specifies an AAA attribute.
user-group: Specifies the user group attribute.
Usage guidelines
Because the device ignores unrecognized LDAP attributes, configure the mapping entries to include
important LDAP attributes that should not be ignored.
An LDAP attribute can be mapped only to one AAA attribute. Different LDAP attributes can be
mapped to the same AAA attribute.
If you do not specify an LDAP attribute for the undo map command, the command deletes all
mapping entries from the LDAP attribute map.
Examples
# In LDAP attribute map map1, map a partial value string of the LDAP attribute named memberof to
AAA attribute named user-group.
<Sysname> system-view
[Sysname] ldap attribute-map map1
ldap-attribute-name: Specifies an LDAP
151
attribute by its name. The