HP 6125XLG R2306-HP 6125XLG Blade Switch Security Configuration Guide - Page 47
Setting the LDAP server timeout period, Configuring administrator attributes, Search base DN
View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 47 highlights
Step Command 3. Specify the LDAP version. protocol-version { v2 | v3 } Remarks By default, LDAPv3 is used. A Microsoft LDAP server supports only LDAPv3. Setting the LDAP server timeout period If the device sends a bind or search request to an LDAP server but receives no response from the server within the LDAP server timeout period, the device considers that the authentication or authorization request has timed out and tries the backup authentication or authorization method. If no backup method is configured in the ISP domain, the device considers the authentication or authorization attempt fails. To set the LDAP server timeout period: Step Command 1. Enter system view. system-view 2. Enter LDAP server view. ldap server server-name 3. Set the LDAP server timeout period. server-timeout time-interval Remarks N/A N/A By default, the LDAP server timeout period is 10 seconds. Configuring administrator attributes To configure the administrator DN and password for binding with the LDAP server during LDAP authentication: Step 1. Enter system view. 2. Enter LDAP server view. 3. Specify the administrator DN. 4. Configure the administrator password. Command Remarks system-view N/A ldap server server-name N/A login-dn dn-string By default, no administrator DN is specified. The administrator DN specified on the device must be consistent with that specified on the LDAP server. login-password { cipher | simple } By default, no administrator password password is specified. Configuring LDAP user attributes To authenticate a user, an LDAP client must establish a connection to the LDAP server, obtain the user DN from the LDAP server, and use the user DN and the user's password to bind with the LDAP server. According to the LDAP DN search mechanism, an LDAP client sends search requests to the server based on the search policy determined by the LDAP user attributes of the LDAP client. The LDAP user attributes include: • Search base DN • Search scope • Username attribute • Username format 38