Reference Guide

46 | aaa authentication-server ldap Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
aaa authentication-server ldap
aaa authentication-server ldap <server>
admin-dn <name>
admin-passwd <string>
allow-cleartext
authport <port>
base-dn <name>
clone <server>
enable
filter <filter>
host <ipaddr>
key-attribute <string>
no ...
preferred-conn-type ldap-s|start-tls|clear-text
timeout <seconds>
Description
This command configures an LDAP server.
Syntax
This command includes the following configuration parameters.
Parameter Description Range Default
<server> Name that identifies the server. — —
admin-dn <name> Distinguished name for the admin user who has read/search
privileges across all of the entries in the LDAP database (the user
does not need write privileges but should be able to search the
database and read attributes of other users in the database).
——
admin-passwd
<string>
Password for the admin user. — —
allow-cleartext Allows clear-text (unencrypted) communication with the LDAP
server.
enabled|
disabled
disabled
authport <port> Port number used for authentication. Port 636 is attempted for
LDAP over SSL, while port 389 is attempted for SSL over LDAP,
Start TLS operation and clear text.
1-65535 389
base-dn <name> Distinguished Name of the node which contains the entire user
database to use.
——
clone <server> Name of an existing LDAP server configuration from which
parameter values are copied.
——
enable Enables the LDAP server. —
filter <filter> Filter that should be applied to search of the user in the LDAP
database (default filter string is: ì(objectclass=*)î ).
— (objectclass
=)*
host <ip-addr> IP address of the LDAP server, in dotted-decimal format. — —
key-attribute
<string>
Attribute that should be used as a key in search for the LDAP
server. For Active Directory, the value is sAMAccountName.
— sAMAccount
Name
no Negates any configured parameter. — —