HP FlexNetwork 10500 Series Security Configuration Manual page 55

Step
1. Enter system view.
2. Enter LDAP server view.
3. Specify the administrator
DN.
4. Configure the
administrator password.
Configuring LDAP user attributes
To authenticate a user, an LDAP client must complete the following operations:
1. Establish a connection to the LDAP server.
2. Obtain the user DN from the LDAP server.
3. Use the user DN and the user's password to bind with the LDAP server.
LDAP provides a DN search mechanism for obtaining the user DN. According to the mechanism, an
LDAP client sends search requests to the server based on the search policy determined by the LDAP
user attributes of the LDAP client.
The LDAP user attributes include:
•
Search base DN.
•
Search scope.
•
Username attribute.
•
Username format.
•
User object class.
If the LDAP server contains many directory levels, a user DN search starting from the root directory
can take a long time. To improve efficiency, you can change the start point by specifying the search
base DN.
To configure LDAP user attributes:
Step
1. Enter system view.
2. Enter LDAP server view.
3. Specify the user search base
DN.
4. (Optional.) Specify the user
search scope.
5. (Optional.) Specify the
username attribute.
6. (Optional.) Specify the
username format.
Command
system-view
ldap server server-name
login-dn dn-string
login-password { cipher |
simple } password
Command
system-view
ldap server server-name
search-base-dn base-dn
search-scope { all-level |
single-level }
user-parameters
user-name-attribute
{ name-attribute | cn | uid }
user-parameters
user-name-format
{ with-domain |
without-domain }
41
Remarks
N/A
N/A
By default, no administrator DN is
specified.
The administrator DN specified on
the device must be the same as
configured on the LDAP server.
By default, no administrator
password is specified.
Remarks
N/A
N/A
By default, no user search base
DN is specified.
By default, the user search scope
is all-level.
By default, the username attribute
is cn.
By default, the username format
is without-domain.