HP VSR1000 Security Configuration Manual page 51

To specify the LDAP version:
Step
1. Enter system view.
2. Enter LDAP server view.
3. Specify the LDAP version.
Setting the LDAP server timeout period
If the device sends a bind or search request to an LDAP server without receiving the server's response
within the server timeout period, the authentication or authorization request times out. Then, the device
tries the backup authentication or authorization method. If no backup method is configured in the ISP
domain, the device considers the authentication or authorization attempt a failure.
To set the LDAP server timeout period:
Step
1. Enter system view.
2. Enter LDAP server view.
3. Set the LDAP server timeout
period.
Configuring administrator attributes
To configure the administrator DN and password for binding with the LDAP server during LDAP
authentication:
Step
1. Enter system view.
2. Enter LDAP server view.
3. Specify the administrator
DN.
4. Configure the
administrator password.
Configuring LDAP user attributes
To authenticate a user, an LDAP client must complete the following operations:
1. Establish a connection to the LDAP server.
2. Obtain the user DN from the LDAP server.
3. Use the user DN and the user's password to bind with the LDAP server.
Command
system-view
ldap server server-name
protocol-version { v2 | v3 }
Command
system-view
ldap server server-name
server-timeout time-interval
Command
system-view
ldap server server-name
login-dn dn-string
login-password { cipher | simple }
password
41
Remarks
N/A
N/A
By default, LDAPv3 is used.
A Microsoft LDAP server supports only
LDAPv3.
Remarks
N/A
N/A
By default, the LDAP server timeout
period is 10 seconds.
Remarks
N/A
N/A
By default, no administrator DN is
specified.
The administrator DN specified on the
device must be the same as
configured on the LDAP server.
By default, no administrator
password is specified.