CLI Guide

cfgLdapUserAttribute (Read/Write)
Table 239. Details of cfgLdapUserAttribute
Description Specifies the user attribute to search for. It is recommended to be unique within the chosen baseDN,
otherwise a search filter must be configured to make sure the uniqueness of the login user. If the
userDN cannot be uniquely identified, login fails with error.
Legal Values String. Maximum length = 254
Default Null
uid if not configured.
cfgLdapGroupAttribute (Read/Write)
Table 240. Details of cfgLdapGroupAttribute
Description Specifies which LDAP attribute is used to check for group membership. This should be an attribute of
the group class. If not specified, then CMC uses the member and unique member attributes.
Legal Values String. Maximum length = 254
Default Null
cfgLdapGroupAttributeIsDN (Read/Write)
Table 241. Details of cfgLdapGroupAttributeIsDN
Description If enabled, the CMC performs DN matching; otherwise, the CMC uses the username provided at login
for matching.
Legal Values • 1 (TRUE)—Use the userDN from the LDAP Server
• 0 (FALSE)—Use the userDN provided by the login user
Default 1
cfgLdapBinddn (Read/Write)
Table 242. Details of cfgLdapBinddn
Description The distinguished name of a user used to bind to the server when searching for the login user's DN. If
not provided, an anonymous bind is used. This is optional but is required if anonymous bind is not
supported.
NOTE: If cfgLDAPBindDN is [null] and cfgLDAPBindPassword is [null], then the CMC
attempts an anonymous bind.
Legal Values String. Maximum length = 254
Default Null
CMC Property Database Group and Object Descriptions 133