CLI Guide
cfgLdapSearchFilter (Read/Write)
Description A valid LDAP search lter. This is used if the user attribute cannot uniquely identify the login user
within the chosen baseDN. The search lter only applies to userDN search and not the group
membership search.
Legal Values
String of maximum length = 1024 characters
Default (objectclass=*)
Searches for all objects in tree.
cfgLDAPCertValidationEnable (Read/Write)
Description Controls certicate validation during SSL handshake.
Legal Values
• 1 (TRUE)—CMC uses the CA certicate to validate the LDAP server certicate during SSL
handshake.
• 0 (FALSE)—CMC does not perform the certicate validation task of SSL handshake.
Default 1
cfgLDAPNetworkTimeout
Description
Congures the network timeout in seconds.
Legal Values Positive integer
Default 30 seconds
cfgLDAPSearchTimeout
Description
Congures the search timeout in seconds.
Legal Values Positive integer
Default 120 seconds
cfgLDAPSRVLookupDomainName
Description
Congures the domain name to be used in the SRV lookup.
Legal Values String of maximum length of 254 alphanumeric characters and hyphens. The string must begin with a
letter.
124 CMC Property Database Group and Object Descriptions