Reference Guide

cfgLDAPRoleGroup
This group congures Generic LDAP Role group descriptions and denes the CMC privileges that LDAP-authenticated users are
granted.
Use this object with the cong or getcong subcommands.
To use this object property, you must have the Chassis Conguration Administrator privilege.
NOTE: You can congure a setting that does not have the hash sign (#) prexed in the output. To modify a congurable
object, use the
—o option.
cfgLDAPRoleGroup is indexed, containing instances numbered from 1 to 5. Each object instance consists of a pair of properties:
• cfgLDAPRoleGroupDN — an LDAP distinguished name (DN)
• cfgLDAPRoleGroupPrivilege — a CMC privilege map
Each LDAP-authenticated user assumes the total set of CMC privileges assigned to the matching LDAP distinguished names that
the user belongs to. That is, if the user belongs to multiple role group DNs, the user receives all associated privileges for that DNs.
The following sections provide information about the objects in the cfgLdapRoleGroup.
cfgLDAPRoleGroupIndex (Read Only)
Description
It is the index value of the Role Group Object.
Legal Values
An integer between 1 and 5
Default
<instance>
cfgLDAPRoleGroupDN (Read or Write)
Description
It is the Domain Name of the group in this index.
Congure the LDAP distinguished name (DN) for the role group instance.
Legal Values
String maximum length = 1024
Default
None
Example
racadm getconfig -g cfgLDAPRoleGroup -o cfgLDAPRoleGroupDN -i 1 <everyone> <groups>
<openldap> <com>
cfgLDAPRoleGroupPrivilege (Read or Write)
Description
A bit–mask dening the privileges associated with this particular group.
Legal Values
0x00000000 to 0x000001
Default
0x000
Example
racadm getconfig -g cfgLDAPRoleGroup -o cfgLDAPRoleGroupPrivilege -i 1 0x000001ff
114