Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

aaa authorization ssh-certificate
If you specify the group method or local method and it fails, the authorization can fail. If you have not
configured a fallback method after the TACACS+ or LDAP server group method, authorization fails if all
server groups fail to respond.
This command does not require a license.
Examples This example shows how to configure LDAP authorization with certificate authentication as the default AAA
authorization method for LDAP servers:
switch# configure terminal
switch(config)# aaa authorization ssh-certificate default group LDAPServer1 LDAPServer2
Related Commands
Command
aaa authorization ssh-publickey
feature ldap
feature tacacs+
show aaa authorization

Cisco Nexus 7000 Series Security Command Reference

44
Description
Configures LDAP or local authorization with the SSH
public key as the default AAA authorization method
for LDAP servers.
Enables the LDAP feature.
Enables the TACACS+ feature.
Displays the AAA authorization configuration.
A Commands