Monitoring Ldap Servers - Cisco Nexus 9000 Series Configuration Manual

Monitoring LDAP Servers

Command or Action
Step 2 aaa authorization {ssh-certificate | ssh-publickey}
default {group group-list | local}
Example:
switch(config)# aaa authorization ssh-certificate
default group LDAPServer1 LDAPServer2
Step 3 (Optional) show aaa authorization [all]
Example:
switch(config)# show aaa authorization
Step 4 (Optional) copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Related Topics
Monitoring LDAP Servers
You can monitor the statistics that the Cisco NX-OS device maintains for LDAP server activity.
Before you begin
Configure LDAP servers on the Cisco NX-OS device.
SUMMARY STEPS
1. show ldap-server statistics {hostname | ipv4-address | ipv6-address}
DETAILED STEPS
Command or Action
Step 1
show ldap-server statistics {hostname | ipv4-address |
ipv6-address}
Example:
switch# show ldap-server statistics 10.10.1.1
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
122
Enabling or Disabling LDAP, on page 110
Purpose
Configures the default AAA authorization method for the
LDAP servers.
The ssh-certificate keyword configures LDAP or local
authorization with certificate authentication, and the
ssh-publickey keyword configures LDAP or local
authorization with the SSH public key. The default
authorization is local authorization, which is the list of
authorized commands for the user's assigned role.
The group-list argument consists of a space-delimited list
of LDAP server group names. Servers that belong to this
group are contacted for AAA authorization. The local
method uses the local database for authorization.
Displays the AAA authorization configuration. The all
keyword displays the default values.
Copies the running configuration to the startup
configuration.
Purpose
Displays the LDAP server statistics.
Configuring LDAP