Nortel 3050 Command Reference Manual page 194

194 Command Reference
Table 59
LDAP Menu Options (/cfg/vpn/aaa/auth/ldap) (cont'd.)
Command Syntax and Usage
groupattr <group attribute names, separated by comma>
userattr <user attribute name>
Copyright © 2007 Nortel Networks
.
Method 1: Assigns the DN (Distinguished Name) that points to the
entry that is one level up from where all user entries are found.
Example: A searchbase value set to ou=People,dc=bluetail,dc=c
om
implies that authentication will be performed against a DN that
corresponds to the following:
uid = <user> , ou = People, dc = bluetail, and dc = com
(where uid is an example of a user attribute, ou = organization unit, and
dc = domain component).
The isdbinddn and isdbindpas commands should not be used.
Method 2: If user entries are located in several different places in the
LDAP Dictionary Information Tree (DIT) or if the user's login name
(used to login to the VPN portal) is different from the user record
identifier (RDN), the DIT has to be searched.
The DN assigned here should point to a position in the DIT from where
all user records can be found, using a subtree search.
To be able to search the DIT, the VPN Gateway must authenticate
itself towards the LDAP server, according to the settings made with the
isdbinddn and isdbindpas commands.
Defines the LDAP attribute that contains the name(s) of the group(s)
of which a particular user in the VPN is a member. The group names
in the LDAP attribute must be defined in the VPN, complete with one or
more access control lists. VPN group names and access control lists
are defined by using the /cfg/vpn #/aaa/group # command.
If you specify more than one group attribute name, separate the names
with comma (,).
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007