H3C S6812 Series Command Reference Manual page 1763

Syntax
map ldap-attribute ldap-attribute-name [ prefix prefix-value delimiter delimiter-value ]
aaa-attribute { user-group | user-profile }
undo map [ ldap-attribute ldap-attribute-name ]
Default
An LDAP attribute map does not contain mapping entries.
Views
LDAP attribute map view
Predefined user roles
network-admin
Parameters
ldap-attribute
ldap-attribute-name argument is a case-insensitive string of 1 to 63 characters.
prefix prefix-value delimiter delimiter-value: Specifies a partial value string of the LDAP attribute for
attribute mapping. The prefix-value argument represents the position where the partial string starts.
The prefix is a case-insensitive string of 1 to 7 characters, such as cn=. The delimiter-value
argument represents the position where the partial string ends, such as a comma (,). If you do not
specify the prefix prefix-value delimiter delimiter-value option, the mapping entry uses the entire
value string of the LDAP attribute.
aaa-attribute: Specifies an AAA attribute.
user-group: Specifies the user group attribute.
user-profile: Specifies the user profile attribute.
Usage guidelines
Because the device ignores unrecognized LDAP attributes, configure the mapping entries to include
important LDAP attributes that should not be ignored.
An LDAP attribute can be mapped only to one AAA attribute. Different LDAP attributes can be
mapped to the same AAA attribute.
If you do not specify an LDAP attribute for the undo map command, the command deletes all
mapping entries from the LDAP attribute map.
Examples
# In LDAP attribute map map1, map a partial value string of the LDAP attribute named memberof to
AAA attribute named user-group.
<Sysname> system-view
[Sysname] ldap attribute-map map1
[Sysname-ldap-map-map1] map ldap-attribute memberof prefix cn= delimiter , aaa-attribute
user-group
Related commands
ldap attribute-map
user-group
user-profile
protocol-version
Use protocol-version to specify the LDAP version.
ldap-attribute-name: Specifies an LDAP
122
attribute by its name. The