Reference Guide

38 | aaa authentication-server ldap Dell PowerConnect ArubaOS 5.0 Command Line Interface | Reference Guide
Syntax
Usage Guidelines
You configure a server before you can add it to one or more server groups. You create a server group for a specific
type of authentication (see “aaa server-group” on page 65).
Example
The following command configures and enables an LDAP server:
aaa authentication-server ldap ldap1
host 10.1.1.243
base-dn cn=Users,dc=1m,dc=corp,dc=com
admin-dn cn=corp,cn=Users,dc=1m,dc=corp,dc=com
admin-passwd abc10
key-attribute sAMAccountName
filter (objectclass=*)
enable
Command History
This command was available in ArubaOS 3.0.
Parameter Description Range Default
<server> Name that identifies the server. — —
admin-dn <name> Distinguished name for the admin user who has read/search
privileges across all of the entries in the LDAP database (the user
does not need write privileges but should be able to search the
database and read attributes of other users in the database).
——
admin-passwd
<string>
Password for the admin user. — —
allow-cleartext Allows clear-text (unencrypted) communication with the LDAP
server.
enabled|
disabled
disabled
authport <port> Port number used for authentication. Port 636 will be attempted
for LDAP over SSL, while port 389 will be attempted for SSL over
LDAP, Start TLS operation and clear text.
1-65535 389
base-dn <name> Distinguished Name of the node which contains the entire user
database to use.
——
clone <server> Name of an existing LDAP server configuration from which
parameter values are copied.
——
enable Enables the LDAP server. —
filter Filter that should be applied to search of the user in the LDAP
database (default filter string is: ì(objectclass=*)î ).
— (objectclass
=)*
host <ip-addr> IP address of the LDAP server, in dotted-decimal format. — —
key-attribute
<string>
Attribute that should be used as a key in search for the LDAP
server. For Active Directory, the value is sAMAccountName.
— sAMAccount
Name
no Negates any configured parameter. — —
preferred-conn-
type
Preferred connection type. clear-text
ldap-s
start-tls
ldap-s
timeout <seconds> Timeout period of a LDAP request, in seconds. 1-30 20 seconds