Ldap Configuration In Switch For Active Directory - Symbol WS5000 Series System Reference Manual

5-20
WS5000 Series Switch System Reference Guide
LDAP Server IP
LDAP Server Port
LDAP Bind DN
LDAP Base DN
LDAP Login Attribute
LDAP Password Attribute
LDAP Group Name Attribute
LDAP Group Membership Filter
(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn})))
LDAP Group Membership Attribute
Note There should be a group configured in the AAA server local database with the
same group name as in LDAP server. The policy in AAA server for this group should
contain the EAP enabled WLAN.
2. Use the following command for LDAP Configuration in switch for Openldap. This is valid only for VPN
CLIENTS.
LDAP Server IP
LDAP Server Port
LDAP Bind DN
LDAP Base DN
LDAP Login
LDAP Password
LDAP Group Name Attribute
LDAP Group Membership Filter
LDAP Group Membership Attribute
LDAP Passwd
Note This auth will work only if the username is not present in any group's available @
LDAP server

5.4.4 LDAP Configuration in switch for Active Directory

The following command is used to configuring LDAP in switch for Active Directory:
LDAP Server IP
LDAP Server Port
LDAP Bind DN
LDAP Base DN
LDAP Login Attribute
%{User
-Name}})
LDAP Password Attribute
LDAP Group Name Attribute
LDAP Group Membership Filter
UserDn
})))
LDAP Group Membership Attribute
Note Only the default PAP encryption type is supported when a user is created in the
Active directory on Windows server. To select all the other encryption, go to the User
Properties > Account Information and select Store User Password in Reversible
Encryption checkbox.
: 192.192.4.42
: 389
: cn=Manager,o=symbol,c=India
: o=symbol,c=India
: (uid=%{Stripped-User-Name:-%
{User-Name}})
: userPassword
: cn
:
: radiusGroupName
: 192.192.4.42
: 389
: cn=Manager,o=symbol,c=India
: o=symbol,c=India
: (uid=%{Stripped-User-Name:-%{User-Name}})
: userPassword
: cn
: (cn=wwvpnuser)
:
: secret
: 192.192.4.42
: 389
: cn=blradmin,ou=WID,dc=TVLAB01,dc=com
: ou=WID,dc=TVLAB01,dc=com
: (sAMAccountName=%{Stripped-User-Name:-
: UserPassword
: cn
: (|(&(objectClass=group)(member=%{Ldap-
: radiusGroupName