Table of Contents
Advertisement
Examples
v Specifies LDAP authentication via an LDAP server at 192.168.4.4:389.
v Specifies XSL-based authentication using the AAA.xsl style sheet.
authorize
Specifies an authorization method and authority.
Syntax
authorize method url host port
authorize custom url "" ""
authorize ldap "" host port
authorize netegrity "" host port
Parameters
method Specifies the authorization method and takes one of the following values:
url
host
port
Validation Credentials List that references the certificate that is used to
validate the remote SSL peer. If the method is not client-ssl or if the
credentials that are submitted by the SSL peer are not authenticated, (other
than checking the expiration date of the certificate and that it has not been
revoked) use two double quotation mark ("") characters without any
intervening space.
# authenticate ldap "" 192.168.4.4 389 ""
#
# authenticate stylesheet store:///AAA.xsl "" "" ""
#
v anyauthenticated
v cleartrust
v custom
v ldap
v netegrity
v passthrough
v saml-attr
v saml-authz
v tivoli
v use-authen-attr
v xmlfile
Specifies the location of the style sheet for authorization purposes. If the
method is other than custom, use two double quotation mark ("")
characters without any intervening space.
Specifies the hostname or IP address of the LDAP or Netegrity
authorization server. If the method is not ldap or netegrity, use two double
quotation mark ("") characters without any intervening space.
Specifies a destination port on the LDAP or Netegrity authorization server.
If the method is not ldap or netegrity, use two double quotation mark ("")
characters without any intervening space.
Chapter 3. AAA Policy configuration mode
153
Advertisement
Table of Contents
