Reference Guide

• cfgLDAPRoleGroupDN — an LDAP distinguished name (DN)
• cfgLDAPRoleGroupPrivilege — a CMC privilege map
Each LDAP-authenticated user assumes the total set of CMC privileges
assigned to the matching LDAP distinguished names that the user belongs to.
That is, if the user belongs to multiple role group DNs, the user receives all
associated privileges for that DNs.
The following sections provide information about the objects in the
cfgLdapRoleGroup.
cfgLdapRoleGroupIndex (Read Only)
Descripti
on
It is the index value of the Role Group Object.
Legal
Values
An integer between 1 and 5
Default
<instance>
cfgLdapRoleGroupDN (Read or Write)
Descripti
on
It is the Domain Name of the group in this index.
Legal
Values
String. Maximum length = 1024
Default
None
Example
racadm getconfig -g cfgLDAPRoleGroup -o cfgLDAPRoleGroupDN
-i 1 cn=everyone,ou=groups,dc=openldap,dc=com
cfgLdapRoleGroupPrivilege (Read or Write)
Descripti
on
A bit–mask defining the privileges associated with this particular
group.
Legal
Values
0x00000000 to 0x000001ff
200