Configuring Ldap Schemes - H3C S5830V2 Security Configuration Manual

If the status of an HWTACACS server changes automatically, the device changes the status of this
•
server accordingly in all HWTACACS schemes in which this server is specified.
To set HWTACACS timers:
Step
1. Enter system view.
2. Enter HWTACACS scheme
view.
3. Set the HWTACACS server
response timeout timer.
4. Set the real-time accounting
interval.
5. Set the server quiet timer.
Displaying and maintaining HWTACACS
Execute the display command in any view and the reset command in user view.
Task
Display the configuration or server
statistics of HWTACACS schemes.
Clear HWTACACS statistics.

Configuring LDAP schemes

Configuration task list
Tasks at a glance
Configuring an LDAP server:
•
(Required.)
•
(Required.)
•
(Optional.)
•
(Optional.)
•
(Required.)
•
(Required.)
(Required.)
Command
system-view
hwtacacs scheme
hwtacacs-scheme-name
timer response-timeout seconds
timer realtime-accounting minutes
timer quiet minutes
Creating an LDAP server
Configuring the IP address of the LDAP server
Specifying the LDAP version
Setting the LDAP server timeout period
Configuring administrator attributes
Configuring LDAP user attributes
Creating an LDAP scheme
Command
display hwtacacs scheme [ hwtacacs-server-name [ statistics ]
reset hwtacacs statistics { accounting | all | authentication |
authorization }
36
Remarks
N/A
N/A
By default, the HWTACACS server
response timeout timer is 5 seconds.
This command is not supported in this
software version and is reserved for
future support.
By default, the real-time accounting
interval is 12 minutes.
A short interval helps improve
accounting precision but requires
many system resources. When there
are 1000 or more users, set a longer
interval.
By default, the server quiet timer is 5
minutes.