ad-server authentication base-dn

Function

The ad-server authentication base-dn command creates a Base DN for an AD authentication server.

The undo ad-server authentication base-dn command restores the default Base DN of an AD authentication server.

By default, the Base DN of an AD authentication server is dc=my-domain, dc=com.

ad-server authentication base-dn base-dn

undo ad-server authentication base-dn

Parameter	Description	Value
base-dn	Specifies the Base DN for an AD authentication server.	The value is a string of 1 to 127 characters excluding question marks (?). When a character string contains spaces, the character string must be quoted with double quotation marks. The length ranges from 3 to 129. In dual-system hot backup networking, the Base DN cannot contain the percent sign (%). NOTE: The value supports multiple languages, including ASCII characters such as the English and non-ASCII characters such as Chinese, German, and French. You can use a command editor of the GBK or UTF-8 encoding format to edit characters. For details about how to switch the encoding format of the system and related precautions, see the language character-set utf-8 command. The encoding format used by the client through which users access the network needs to be the same as that used by the device. Otherwise, users may fail to go online or the user name is displayed as garbled characters. After the encoding format is switched, if the user names of some users among the original online users contain non-ASCII characters, these user names are displayed as garbled characters.

AD server template view

3: Management level

The Base DN is the position where the search for an item starts, for example, dc=eng,dc=test,dc=com.

# Create a Base DN dc=eng,dc=test,dc=com for an AD authentication server.

<sysname> system-view
[sysname] ad-server template temp1
[sysname-ad-temp1] ad-server authentication base-dn dc=eng,dc=test,dc=com