Nortel 3050 Command Reference Manual page 195

Table 59
LDAP Menu Options (/cfg/vpn/aaa/auth/ldap) (cont'd.)
Command Syntax and Usage
isdbinddn
isdbindpas
ldapmacro
enaldaps true|false
Copyright © 2007 Nortel Networks
.
/cfg/vpn <id> /aaa/auth <id> /ldap LDAP Configuration 195
Method 1: Defines the LDAP attribute that contains the user name
used for authenticating a user in the VPN.
The default user attribute name is uid.
Method 2: If the user's portal login name is not identical with
the user record identifier (RDN), for example when using LDAP
for authentication towards Active Directory, the LDAP Dictionary
Information Tree (DIT) has to be searched for the user record, using a
combination of the user's login name and a user attribute.
Example: In Active Directory, a user record is defined as
the following DN (Distinguished Name): cn=Bill Smith,
ou=people, dc=bluetail, dc=com. It also contains the attribute
sAMAccountName with the value bill, which corresponds to the
user's login name. Thus, if userattr is defined as sAMAccountName,
the user record Bill Smith will be found.
To be able to search the DIT, the VPN Gateway must authenticate
itself towards the LDAP server, according to the settings made with the
isdbinddn and isdbindpas commands.
Points out an entry in the LDAP server used for authenticating the VPN
Gateway.
This command is only used with Method 2.
Sets the password to be used when the VPN Gateway authenticates to
the LDAP entry pointed out with the isdbinddn command.
This command is only used with Method 2.
Displays the LDAP Macro menu. To view menu options, see
"/cfg/vpn <id> /aaa/auth <id> /ldap/ldapmacro LDAP Macro
Configuration" (page 199).
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007