Reference Guide

Legal Values
String maximum length = 254
Default
Null
cfgLDAPEnable (Read or Write)
Description
Enables or disables LDAP service.
If this property is disabled, local iDRAC authentication is used for user logins.
Legal Values
• 1 — Enable
• 0 — Disable
Default
0
cfgLDAPGroupAttribute (Read or Write)
Description
Specifies which LDAP attribute is used to check for group membership. It must be an attribute of the group class. If
not specified then the member and unique member attributes are used.
Legal Values
String maximum length = 254
Default
Null
cfgLDAPGroupAttributeIsDN (Read or Write)
Description
When it is set to 1, iDRAC compares the userDN retrieved from the directory to compare to the members of the
group. If it is set to 0, the user name provides the login user to compare to the members of the group. It does not
affect the search algorithm for the bind. iDRAC always searches the
userDN and uses the userDN to bind.
Legal Values
• 1(TRUE) — Use the userDN from the LDAP Server
• 0(FALSE) — Use the userDN to provide the login user
Default
1
cfgLDAPPort (Read or Write)
Description
Port of LDAP over SSL. Non-SSL port is not supported.
Legal Values
1–65535
Default
636
cfgLDAPSearchFilter (Read or Write)
Description
To validate LDAP search filter, use the user attribute that cannot uniquely identify the login user within the chosen
baseDN. The search filter only applies to userDN search and not the group membership search.
Legal Values
String of maximum length = 254 characters
180 iDRAC Property Database Group and Object Descriptions