Brocade Communications Systems RFS4000 Cli Reference Manual page 577

Parameters
ldap-server primary host
<IP> port <1-65535>
login <user-name>
bind-dn
<distinguished-name>
base-dn
<distinguished-name>
passwd {<password>|
<password>|<password>}
passwd-attr
<password-attribute>
group-attr
<group-attribute>
group-filter
<group-filter>
group-membership <group>
net-timeout
<1-10>
ldap-server secondary host
<IP> port <1-65535> login
<user-name> bind-dn
<distinguished-name>
base-dn
<distinguished-name>
passwd
{<password>|<password>|
<password>}
passwd-attr
<password-attribute>
group-attr <group-attribute>
group-filter <group-filter>
group-membership <group>
net-timeout
<1-10>
Usage Guidelines
Use the login filter and group filter values (described in the example below) for all LDAP
configuration scenarios
Use the
-dn. This is used for the initial login to the active directory.
The
Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide
53-1001931-01
Sets the primary LDAP server's configuration
•
Defines the secondary LDAP server's configuration.
parameter to enter the password for the active directory user mentioned in bind
passwd
and
passwd-attr group-membership
Radius configuration commands
host < IP> – Sets the LDAP server's IP configuration
•
<IP> – Defines the LDAP server IP address
•
port <number> – Enter the TCP/IP port number for the
LDAP server acting as the data source
•
login <user-name> – Use the following as the login:
sAMAccountName=%{Stripped-User-N
(
ame:-%{User-Name}})
•
bind-dn <distinguished-name> – Specifies the
distinguished name to bind with the LDAP server
•
base-dn <distinguished-name> – Specifies a
distinguished name that establishes the base object for
the search. The base object is the point in the LDAP tree
at which to start searching.
•
passwd {<password>|<password>|<password>} –
Sets a valid password for the LDAP server
•
passwd-attr <password-attribute> – Enter the password
attribute used by the LDAP server for authentication
•
group-attr <group-attribute> – Specifies the group
attribute used by the LDAP server
•
group-filter <group-filter> – Specifies the group filters
used by the LDAP server
•
group-membership <group> – Specifies the Group
Member Attribute sent to the LDAP server when
authenticating users
•
net-timeout<1-10> – Enter a timeout the system uses
to terminate the connection to the RADIUS Server if no
activity is detected
is retained as described in the following example:
19
575