Reference Guide

Default
0
cfgLDAPSRVLookupDomainName (Read Only)
Description To use in the SRV lookup, configure the domain name.
Legal Values
String of maximum length of 254 alphanumeric characters and hyphens. The string must begin with a
letter.
Default
[null]
cfgLDAPSRVLookupServiceName (Read or Write)
Description To use in the SRV lookup, configure the service name.
Legal Values
String of maximum length of 254 characters.
Default
LDAP
cfgLDAPRoleGroup
This group configures Generic LDAP Role group descriptions and defines the CMC privileges that LDAP-authenticated users are
granted.
Use this object with the config or getconfig subcommands.
To use this object property, you must have the Chassis Configuration Administrator privilege.
NOTE:
You can configure a setting that does not have the hash sign (#) prefixed in the output. To modify a configurable
object, use the —o option.
cfgLDAPRoleGroup is indexed, containing instances numbered from 1 to 5. Each object instance consists of a pair of
properties:
● cfgLDAPRoleGroupDN — an LDAP distinguished name (DN)
● cfgLDAPRoleGroupPrivilege — a CMC privilege map
Each LDAP-authenticated user assumes the total set of CMC privileges assigned to the matching LDAP distinguished names
that the user belongs to. That is, if the user belongs to multiple role group DNs, the user receives all associated privileges for
that DNs.
The following sections provide information about the objects in the cfgLdapRoleGroup.
cfgLDAPRoleGroupIndex (Read Only)
Description
It is the index value of the Role Group Object.
Legal Values
An integer between 1 and 5
Default
<instance>
cfgLDAPRoleGroupDN (Read or Write)
Description
It is the Domain Name of the group in this index.
Configure the LDAP distinguished name (DN) for the role group instance.
132 CMC Property Database Group and Object Descriptions