CLI Guide

Table 247. Details of cfgLDAPSearchTimeout (continued)
Default 120 seconds
cfgLDAPSRVLookupDomainName
Table 248. Details of cfgLDAPSRVLookupDomainName
Description Configures the domain name to be used in the SRV lookup.
Legal Values String of maximum length of 254 alphanumeric characters and hyphens. The string must begin with a
letter.
Default [null]
cfgLDAPSRVLookupEnable
Table 249. Details of cfgLDAPSRVLookupEnable
Description Configures the CMC to query a DNS server for SRV records.
Legal Values • 1 (true)
• 0 (false)
Default 0
cfgLDAPSRVLookupServiceName (Read/Write)
Table 250. Details of cfgLDAPSRVLookupServiceName
Description Configures the service name to be used in the SRV lookup.
Legal Values String of maximum length of 254 characters.
Default ldap
cfgLdapRoleGroup
Use this object with the getconfig or config subcommands.
To use this object property, you must have the Chassis Configuration Administrator privilege.
This group configures Generic LDAP Role group descriptions and defines the CMC privileges that LDAP–authenticated users are granted.
cfgLDAPRoleGroup is indexed, containing instances numbered from 1 to 5. Each object instance consists of a pair of properties:
• cfgLDAPRoleGroupDN: an LDAP distinguished name (DN)
• cfgLDAPRoleGroupPrivilege: a CMC privilege map
Each LDAP–authenticated user assumes the total set of CMC privileges assigned to the matching LDAP distinguished names that the
user belongs to.
That is, if the user belongs to multiple role group DNs, the user receives all associated privileges for those DNs.
The following sections provide information about the objects in the cfgLdapRoleGroup group.
CMC Property Database Group and Object Descriptions
135