User-Certdn-Match - Cisco Nexus 7000 Series Command Reference Manual

user-certdn-match

user-certdn-match
To configure the attribute name, search filter, and base-DN for the certificate DN match search operation in
order to send a search query to the Lightweight Directory Access Protocol (LDAP) server, use the
user-certdn-match command. To disable this configuration, use the no form of this command.
user-certdn-match attribute-name attribute-name search-filter filter base-DN base-DN-name
no user-certdn-match
Syntax Description
attribute-name attribute-name
search-filter filter
base-DN base-DN-name
Command Default
None
Command Modes
LDAP search map configuration
Command History
Release
5.0(2)
Usage Guidelines
To use this command, you must enable LDAP.
This command does not require a license.
Examples This example shows how to configure the attribute name, search filter, and base-DN for the certificate DN
match search operation in order to send a search query to the LDAP server:
switch# conf t
switch(config)# ldap search-map s0
switch(config-ldap-search-map)# user-certdn-match attribute-name certificateDN search-filter
(&(objectClass=inetOrgPerson)(cn=$userid)) base-DN dc=acme,dc=com
switch(config-ldap-search-map)#
Cisco Nexus 7000 Series Security Command Reference
968
Specifies the attribute name of the LDAP search map.
The name is alphanumeric, case sensitive, and has a
maximum of 128 characters.
Specifies the filter for the LDAP search map. The
name is alphanumeric, case sensitive, and has a
maximum of 128 characters.
Specifies the base designated name for the LDAP
search map. The name is alphanumeric, case sensitive,
and has a maximum of 128 characters.
Modification
This command was introduced.
U Commands