LEGRAND Server Technology PRO3X User Manual page 124

<base_DN> is the base DN for search.
<login_name_att> is the login name attribute.
<user_entry_class> is the User Entry Object Class.
Optional Parameters
You can add one or multiple "optional parameters", such as specifying the Bind DN or certificate upload, to an LDAP-server-
adding command as illustrated below. If adding multiple optional parameters, you must add them to the END of the
command and separate them with a space.
▪
Example 1 -- Specify an Active Directory Domain's name:
authentication ldap add <host> <port> <ldap_type> <security> <bind_type> <base_DN>
<login_name_att> <user_entry_class> adDomain <AD_domain>
▪
Example 2 -- Set up the bind DN:
authentication ldap add <host> <port> <ldap_type> <security> <bind_type> <base_DN>
<login_name_att> <user_entry_class> bindDN <bind_DN>
"Optional Parameters" table:
Parameters
userSearchSubfilter <filter>
bindDN <bind_DN>
adDomain <AD_domain>
verifyServerCertificate
<verify_cert>
allowExpiredCertificate
<allow_exp_cert>
To configure
User search subfilter
bind DN
▪ The system will prompt you to enter and re-confirm the bind
password after adding this parameter to the command.
Active Directory Domain name
Certificate verification setting
▪ After setting to true, the system will prompt you to upload a
certificate.
Whether to accept expired or not valid yet certificate.
PRO3X User Guide – Command Line Interface (CLI)
124 of 182
Using the PRO3X Command Line Interface (CLI)