CLI Guide

Each LDAP–authenticated user assumes the total set of CMC privileges assigned to the matching LDAP distinguished names that the user
belongs to.
That is, if the user belongs to multiple role group DNs, the user receives all associated privileges for those DNs.
The following sections provide information about the objects in the cfgLdapRoleGroup group.
cfgLdapRoleGroupDN (Read/Write)
Table 251. Details of cfgLdapRoleGroupDN
Description This is the Domain Name of the group in this index.
For CMC, congure the LDAP distinguished name (DN) for the role group instance.
Legal Values String. Maximum length = 1024
Default None
Example
racadm getconfig -g cfgLDAPRoleGroup -o cfgLDAPRoleGroupDN
-i 1 cn=everyone,ou=groups,dc=openldap,dc=com
cfgLdapRoleGroupPrivilege (Read/Write)
Table 252. Details of cfgLdapRoleGroupPrivilege
Description A bit–mask dening the privileges associated with this particular group.
Legal Values 0x00000000 to 0x000001
Default 0x000
Example
racadm getconfig -g cfgLDAPRoleGroup -o cfgLDAPRoleGroupPrivilege
-i 1 0x0
cfgLocation
This group denes objects that support physical location properties. Use this object with the getconfig or config subcommands.
To use this object property, you must have the Chassis Conguration Administrator privilege.
CMC Property Database Group and Object Descriptions
139