Cisco 4700M Configuration Manual page 91

Chapter 2 Configuring Authentication and Accounting Services
To define private attributes for virtualization support in an LDAP server, perform
the following steps:
Add a private schema to include the definition of the private attributes (context ID
Step 1
and user profile) and the private objectClass. An example is as follows:
attributetype (2.5.4.55 NAME ( 'ctxid' 'contextid' )
attributetype ( 2.5.4.56 NAME ( 'usrprof' 'userprofile' )
objectclass ( 2.5.6.30 NAME 'ctxperson'
The example includes arbitrary OIDs. The OIDs that you define must not overlap
with any existing OIDs in the LDAP server database.
Step 2 Include this private schema in the configuration, which would be sladp.conf in the
case of OpenLDAP.
Define the LDAP database in LDAP Data Interchange Format (LDIF) with entries
Step 3
that contain the context ID and the user profile. LDIF formats are defined in
RFC 2849. An example is as follows:
dn: ctxid=admin,cn=john,ou=employees,dc=example,dc=com
objectClass: ctxperson
ctxid: admin
cn: john
usrprof: shell:Admin=ROLE-1 DOMAIN-1
userPassword: xxxxxxxx
Start the LDAP server, which is slapd in the case of OpenLDAP.
Step 4
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
DESC 'virtual context name'
SUP name )
DESC 'user profile'
SUP name )
DESC 'a person'
SUP top STRUCTURAL
MUST cn
MAY ( $ ctxid $ usrprof ) )
Configuring the AAA Server
2-21