Fujitsu SPARC EnterpriseM3000 User Manual page 117

LDAP/SSL
TABLE 2-10
Item Description
Load/Delete Loads or deletes the certificate of primary and
certificate up to five alternate LDAP/SSL servers.
Display Displays the userdomain.
userdomain
Userdomain Configures up to five userdomains.
Userdomain can take the form of Distinguished
Name (DN).
Display Displays the defaultrole setting.
defaultrole
Defaultrole All users authenticated via LDAP/SSL are
assigned privileges set in this parameter.
Display group Displays configuration of administrator group,
operator group, or custom group.
Administrator Assigns group name for up to five specified
group administrator groups. The administrator group
has platadm, useradm, and auditadm privileges
and you cannot change that.
Operator Assigns group name for up to five specified
group operator
groups. The operator group has platop and
auditop
privileges and you cannot change that.
Custom group Assigns group name and privileges for up to
five groups.
Timeout Configures transaction timeout, in seconds.
Seconds can be 1 to 20.
Enable/Disabl Enables or Disables logging of LDAP/SSL
e log authentication and authorization diagnostic
messages.
Display log Displays LDAP/SSL authentication and
authorization diagnostic messages
Clear log Clears log file of LDAP/SSL authentication and
authorization diagnostic messages.
Default Resets LDAP/SSL settings to factory default.
2-74 SPARC Enterprise Mx000 Servers XSCF User's Guide • January 2012
Administration (Continued)
Shell command Remarks
The strictcertmode must be in
setldapssl
the disabled state for a
certificate to be removed.
showldapssl
setldapssl
showldapssl
setldapssl
setldapssl
setldapssl
setldapssl
setldapssl
The default is 4. If the
setldapssl
specified timeout is too brief
for the configuration, the
login process or retrieval of
user privilege settings could
fail.
This log is cleared on XSCF
setldapssl
reset.
showldapssl
setldapssl
setldapssl