ldap command

Use this command to display and configure the LDAP protocol configuration parameters.

Syntax:

ldap [-options]

Table 1. ldap options
Option	Description	Values
-aom	Authentication only mode for Active Directory Users	enabled, disabled
-a	User authentication method	loc: local only ldap: LDAP only locld: local first then LDAP ldloc: LDAP first then local
-b	Binding method	anon: anonymous client: bind with ClientDN and password login: bind with Login Credential
-c	Client distinguished name	String of up to 127 characters for client_dn
-d	Search domain	String of up to 63 characters for search_domain
-fn	Forest name	For active directory environments. String of up to 127 characters.
-f	Group filter	String of up to 127 characters for group_filter
-g	Group search attribute	String of up to 63 characters for group_search_attr
-l	Login permission attribute	String of up to 63 characters for string
-p	Client password	String of up to 15 characters for client_pw
-pc	Confirm client password	String of up to 15 characters for confirm_pw Command usage is: ldap -p client_pw -pc confirm_pw This option is required when you change the client password. It compares the confirm_pw argument with the client_pw argument. The command will fail if the arguments do not match.
-r	Root entry distinguished name (DN)	String of up to 127 characters for root_dn
-s1ip	Server 1 host name/IP address	String up to 127 characters or an IP address for host name/ip_addr
-s2ip	Server 2 host name/IP address	String up to 127 characters or an IP address for host name/ip_addr
-s3ip	Server 3 host name/IP address	String up to 127 characters or an IP address for host name/ip_addr
-s4ip	Server 4 host name/IP address	String up to 127 characters or an IP address for host name/ip_addr
-s1pn	Server 1 port number	A numeric port number up to 5 digits for port_number
-s2pn	Server 2 port number	A numeric port number up to 5 digits for port_number
-s3pn	Server 3 port number	A numeric port number up to 5 digits for port_number
-s4pn	Server 4 port number	A numeric port number up to 5 digits for port_number
-u	User's login name search attribute	String of up to 63 characters for search_attrib
-v	Get LDAP server address through DNS	off, on
-h	Displays the command usage and options

Example:

system> ldap
   -aom enable
   -a   locld
   -b   client
   -c   cn=admin,dc=lenovo,dc=com
   -d
   -fn
   -f   example.com
   -g   cn
   -l   XCC3RBSPermissions
   -r
   -s1ip 10.241.99.94 
   -s2ip
   -s3ip
   -s4ip
   -s1pn 389
   -s2pn 389
   -s3pn 389
   -s4pn 389
   -u uid
   -v off
system>

Give documentation feedback