Fujitsu SPARC EnterpriseM3000 User Manual page 94

Active Directory Administration (Continued)
TABLE 2-8
Item Description
Enable/ Enables or disables the expanded search mode.
disable
The expanded search mode is only enabled
expanded
when to address specific customer environment
search mode
where user's account is not UserPrincipalName
(UPN) format.
Enable/ Enables or disables the strictcertmode.
disable
If strictcertmode is enabled, the server's
strictcertmode
certificate must have already been uploaded to
the server so that the certificate signatures can
be validated when the server certificate is
presented.
Display server Displays the following
certificate
• Certificate information for the primary and
up to five alternate Active Directory servers.
• The full certificate
Load/Delete Loads or deletes the certificate of primary and
certificate up to five alternate Active Directory servers.
Display Displays the userdomain.
userdomain
Userdomain Configures up to five userdomains.
Userdomain can take the form of UPN like
<USERNAME>@domainname
or the form of Distinguished Name (DN) like
"uid=<USERNAME>,ou= OrganizationUnit,
dc= DomainName".
Display Displays the defaultrole setting.
defaultrole
Defaultrole All users authenticated via LDAP/SSL are
assigned privileges set in this parameter.
Display group Displays configuration of administrator group,
operator group, or custom group.
Administrator Assigns group name for up to five specified
group administrator groups. The administrator group
has platadm, useradm, and auditadm privileges
and you cannot change that.
Shell command Remarks
The expanded search mode is
setad
disabled by default.
The strictcertmode is disabled
setad
by default.
showad
The strictcertmode must be in
setad
the disabled state for a
certificate to be removed.
showad
If a user domain is specified
setad
directory by UPN form at the
login prompt such as "login:
ima.admin@dc01.example.co
m", that user domain is used
for this login attempt.
showad
setad
setad
setad
Chapter 2 Setting Up XSCF 2-51