Table 2-6 Ldap Administration - Sun Microsystems Sun SPARC Enterprise M3000 User Manual

LDAP Administration
TABLE 2-6
Item Description
Display the Displays the use of an LDAP server for
use of LDAP authentication and privilege lookup.
Enable/ Enables or disables the use of an LDAP server
disable the for authentication and privilege lookup.
use of LDAP
Display client Displays LDAP client setting information.
Bind ID Bind an ID for a connection to (bind:
authenticate) an LDAP server.
password Sets a password used to bind an LDAP server.
Search base Sets an LDAP tree search base (baseDN).
Certificate Imports the certificate chain of an LDAP server.
chain
Import a certificate chain as follows:
• Import a secure copy (scp) from a remote file.
LDAP Specify the IP addresses and port numbers of
server/port the primary and secondary LDAP servers.
Specify IP addresses or host names for the
addresses.
(e.g. ldap://foobar.east,
ldaps://10.8.31.14:636 )
Timeout Sets the maximum time (seconds) allowed for
an LDAP search.
LDAP test Tests the connection to an LDAP server.
2-40 SPARC Enterprise Mx000 Servers XSCF User's Guide • August 2009
Shell command Remarks
showlookup
If this specifies that
setlookup
authentication data and user
privilege data be placed
together on an LDAP server,
the system first searches the
local area, and it searches the
LDAP server only if the
target data is not found
locally.
showldap
Bind ID maximum length is
setldap
128 characters.
A password can consist of 8
setldap
to 16 characters.
• If this item is omitted, the
setldap
command searches the tree,
beginning from the top.
• Search base maximum
length is 128 characters.
• The certificate chain must
setldap
be in PEM format. (Note 1)
• A password may need to
be entered to import an scp
from a remote file.
The default LDAP port
setldap
number is 636 for ldaps, 389
for ldap when the port
number is not specified.
setldap
setldap