CLI Guide

cfgLDAPGroupAttributeIsDN (Read or Write)
Table 227. Details of cfgLDAPGroupAttributeIsDN attribute
Description
When it is set to 1, iDRAC compares the userDN retrieved from the directory to compare to the members
of the group. If it is set to 0, the user name provides the login user to compare to the members of the
group. It does not affect the search algorithm for the bind. iDRAC always searches the userDN and uses
the userDN to bind.
If enabled, the CMC performs DN matching, otherwise the CMC uses the user name provided at login for
matching.
Legal Values
● 1(TRUE) — Use the userDN from the LDAP Server
● 0(FALSE) — Use the userDN to provide the login user
Default
1
cfgLDAPBindDN (Read or Write)
Table 228. Details of cfgLDAPBindDN attribute
Description
The distinguished name of a user used to bind to the server when searching for the login user's DN. If not
provided, an anonymous bind is used. If necessary It is optional to support anonymous bind.
NOTE: If cfgLDAPBindDN is [null] and cfgLDAPBindPassword is [null], then the iDRACCMC
attempts an anonymous bind.
Legal Values
String maximum length = 254
Default
Null
cfgLDAPBindPassword (Write Only)
Table 229. Details of cfgLDAPBindPassword attribute
Description
A bind password is used with the bindDN. The bind password is a sensitive data, and must be protected. It
is optional to support anonymous bind.
Legal Values
String maximum length = 254
Default
Null
cfgLDAPSearchFilter (Read or Write)
Table 230. Details of cfgLDAPSearchFilter attribute
Description
To validate LDAP search filter, use the user attribute that cannot uniquely identify the login user within the
chosen baseDN. The search filter only applies to userDN search and not the group membership search.
Legal Values
String of maximum length = 254 characters
String of maximum length = 1024 characters
Default
(objectless=*)
Searches for all objects in tree.
iDRAC Property Database Group and Object Descriptions 195