HP VSR1000 Security Configuration Manual page 52

LDAP provides a DN search mechanism for obtaining the user DN. According to the mechanism, an
LDAP client sends search requests to the server based on the search policy determined by the LDAP user
attributes of the LDAP client.
The LDAP user attributes include:
Search base DN
•
Search scope
•
Username attribute
•
Username format
•
• User object class
If the LDAP server contains many directory levels, a user DN search starting from the root directory can
take a long time. To improve efficiency, you can change the start point by specifying the search base DN.
To configure LDAP user attributes:
Step
1. Enter system view.
2. Enter LDAP server view.
3. Specify the user search base
DN.
4. (Optional.) Specify the user
search scope.
5. (Optional.) Specify the
username attribute.
6. (Optional.) Specify the
username format.
7. (Optional.) Specify the user
object class.
Creating an LDAP scheme
You can configure up to 16 LDAP schemes. An LDAP scheme can be referenced by multiple ISP domains.
To create an LDAP scheme:
Step
1. Enter system view.
2. Create an LDAP scheme
and enter LDAP scheme
view.
Command
system-view
ldap server server-name
search-base-dn base-dn
search-scope { all-level |
single-level }
user-parameters
user-name-attribute
{ name-attribute | cn | uid }
user-parameters
user-name-format { with-domain |
without-domain }
user-parameters user-object-class
object-class-name
Command
system-view
ldap scheme ldap-scheme-name
42
Remarks
N/A
N/A
By default, no user search base DN
is specified.
By default, the user search scope is
all-level.
By default, the username attribute
is cn.
By default, the username format is
without-domain.
By default, no user object is
specified, and the default user
object class on the LDAP server is
used.
The default user object class varies
by device.
Remarks
N/A
By default, no LDAP scheme is defined.