LEGRAND Server Technology PRO3X User Manual page 433

• •
<filter> is the user search subfilter you specify.
• • <bind_DN> is bind DN.
• •
<AD_domain> is the Active Directory Domain.
• •
<verify_cert> is one of the options: true or false.
Option Description
Enable the verification of the LDAP server certificate.
true
Disable the verification of the LDAP server certificate.
false
• •
<allow_exp_cert> is one of the options: true or false.
Option Description
Certificates that are either expired or not valid yet are all accepted.
true
Only valid certificates are accepted.
false
Illustrations of Adding LDAP Servers
This section shows several LDAP command examples. Those words highlighted in bold are required for
their respective examples.
▶
An OpenLDAP server:
config:# authentication ldap add op‑ldap.raritan.com 389 openldap none
anonymousBind dc=raritan,dc=com uid inetOrgPerson
▶
A Microsoft Active Directory server:
config:# authentication ldap add ac‑ldap.raritan.com 389 activeDirectory none
anonymousBind dc=raritan,dc=com sAMAccountName user adDomain
raritan.com
▶
An LDAP server with a TLS certificate uploaded:
a. Enter the CLI command with the following two TLS-related options set and/or added: a.
▪ ▪ <security> is set to tls or startTls.
▪ ▪ The "verifyServerCertificate" parameter is added to the command and set to "true."
433