HP 5920 Series Configuration Manual page 45

Step
3. Set the LDAP server timeout
period.
Configuring administrator attributes
To configure the administrator DN and password for binding with the LDAP server during LDAP
authentication:
Step
Enter system view.
1.
2. Enter LDAP server view.
3. Specify the administrator
DN.
4. Configure the
administrator password.
Configuring LDAP user attributes
To authenticate a user, an LDAP client must establish a connection to the LDAP server, obtain the user DN
from the LDAP server, and use the user DN and the user's password to bind with the LDAP server.
According to the LDAP DN search mechanism, an LDAP client sends search requests to the server based
on the search policy determined by the LDAP user attributes of the LDAP client.
The LDAP user attributes include:
Search base DN
•
Search scope
•
Username attribute
•
Username format
•
User object class
•
If the LDAP server contains many directory levels, a user DN search starting from the root directory can
take a long time. You can change the start point by specifying the search base DN to improve search
efficiency.
To configure LDAP user attributes:
Step
1. Enter system view.
2. Enter LDAP server view.
3. Specify the user search base
DN.
4. (Optional.) Specify the user
search scope.
Command
server-timeout time-interval
Command
system-view
ldap server server-name
login-dn dn-string
login-password { cipher | simple }
password
Command
system-view
ldap server server-name
search-base-dn base-dn
search-scope { all-level |
single-level }
37
Remarks
By default, the LDAP server timeout
period is 10 seconds.
Remarks
N/A
N/A
By default, no administrator DN is
specified.
The administrator DN specified on the
device must be consistent with that
specified on the LDAP server.
By default, no administrator
password is specified.
Remarks
N/A
N/A
By default, no user search base DN
is specified.
By default, the user search scope is
all-level.