Ldap Group-Attribute/Group-Dn - Mellanox Technologies Mellanox SX1018 Command Reference Manual

ldap group-attribute/group-dn

ldap {group-attribute {<group-att> |member | uniqueMember} | group-dn
<group-dn>}
no ldap {group-attribute | group-dn}
Sets the distinguished name or attribute name of a group on the LDAP server.
The no form of the command resets the attribute to its default values.
Syntax Description group-att
member
uniqueMember
group-dn
Default group-att: member
group-dn: ""
Modes/Context Config
History 3.1.0000
Role admin
Example
switch (config) # ldap group-attribute member
switch (config) # ldap group-dn my-group-dn
switch (config) # show ldap
User base DN
User search scope : subtree
Login attribute
Bind DN
Bind password
Group base DN
Group attribute
LDAP version
Referrals
Server port
Search Timeout
Bind Timeout
SSL mode
Server SSL port
SSL cert verify
LDAP servers:
switch (config) #
Related Commands show ldap
Note •
•
: ou=department,dc=example,dc=com
: sAMAccountName
: my-dn
: my-password
: my-group-dn
: member
: 3
: yes
: 389
: 5
: 5
: none
: 636 (not active)
: yes
1: 10.10.10.10
2: 10.10.10.12
The user's distinguished name must be listed as one of the values of this attribute, or the
user will not be authorized to log in
After login authentication, if the group-dn is set, a user must be a member of this group or
the user will not be authorized to log in. If the group is not set ("" - the default) no authori-
zation checks are done.
Specifies a custom attribute name.
groupOfNames or group membership attribute.
groupOfUniqueNames membership attribute.
DN of group required for authorization.
Mellanox Technologies
Rev 1.6.2
155