Configuring The Base Dn For An Ldap Server Group - Cisco 4700M Configuration Manual

Chapter 2 Configuring Authentication and Accounting Services
Configuring the ACE as a Client of a RADIUS, TACACS+, or LDAP Server
The text argument is the user profile. The user profile is an unquoted text string
of a maximum of 63 alphanumeric characters without spaces.
For example, to configure an LDAP user profile attribute, enter:
host1/Admin(config-ldap)# attribute user-profile usrprof
To delete the user profile attribute, enter:
host1/Admin(config-ldap)# no attribute user-profile usrprof

Configuring the Base DN for an LDAP Server Group

When you create an LDAP server group, the top level of the LDAP directory tree
is the base, referred to as the base DN. The base DN is used to perform the search
operation in the LDAP server directory. A base DN can take a form such as
"dc=your,dc=domain", where the base DN uses the DNS domain name as its basis
and is split into the domain components. Use the base-DN server group command
to configure the base DN that you want to use to perform search operations in the
LDAP directory tree.
The base DN is a mandatory configuration for an LDAP server group. Without
Note
this setting, a user cannot be authenticated.
You configure the base DN at the submode for the LDAP server group (created as
described in the "Configuring AAA Server Groups" section).
The syntax of this command is as follows:
base-DN text
The text argument is the distinguished name of the search base. The base DN
name is a quoted text string of a maximum of 63 alphanumeric characters without
spaces.
For example, to configure the base DN, enter:
host1/Admin(config)# aaa group server ldap LDAP_Server_Group1
host1/Admin(config-ldap)# base-DN "dc=sns,dc=cisco,dc=com"
To delete the configured base DN, enter:
host1/Admin(config-ldap)# no base-DN "dc=sns,dc=cisco,dc=com"
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
2-44
OL-16202-01