| Parameter | Description | Value |
|---|---|---|
template-name |
Displays the configuration of the specified AD server template. If this parameter is not specified, the system displays the configuration of all the AD server templates. |
It must be an existing AD server template name. |
The display ad-server template command displays the configurations of AD server templates and helps to locate AD faults.
# Display detailed information about AD server template temp.
<sysname> display ad-server template temp ------------------------------------------------------------------- Server-template-name : temp Base DN : dc=my-domain,dc=com Administrator anonymous bind : No Manager DN : cn=administrator Manager password : %@%@evxcUY"TM)4C|mK75"#A-V#/%@%@ Primary-authentication-server : 10.1.1.1:88 Secondary-authentication-server : -:0 Third-authentication-server : -:0 Authentication-Server-URL : Primary-authentication-server host name : ad.my-domain.com Secondary-authentication-server host name: Third-authentication-server host name : AD-server Ldap port : 389 Bind manager with Base DN : Yes User filter attribute : sAMAccountName Group filter attribute : ou Mobile Number filter attribute : telephoneNumber Virtual IP Address filter attribute : VIP Mask filter attribute : VIPMask Bind user when authorization : Yes Source-IP-address : Source-LoopBack : Source-VLAN : -------------------------------------------------------------------
Item |
Description |
|---|---|
Server-template-name |
Name of an AD server template. To configure the name, run the ad-server template command. |
Base DN |
Base DN of an AD server. To configure the Base DN, run the ad-server authentication base-dn command. |
Administrator anonymous bind |
Whether to allow the administrator to access an AD server anonymously:
|
Manager DN |
Administrator Base DN for accessing an AD server. To configure the administrator Base DN, run the ad-server authentication manager command. |
Manager password |
Administrator password for accessing an AD server. To configure the administrator password, run the ad-server authentication manager command. |
Primary-authentication-server |
IP address of the primary AD authentication server. To configure the IP address, run the ad-server authentication command. |
Secondary-authentication-server |
IP address of the secondary AD authentication server. To configure the IP address, run the ad-server authentication command. |
Third-authentication-server |
IP address of the third AD authentication server. To configure the IP address, run the ad-server authentication command. |
Authentication-Server-URL |
URL of the AD authentication server. To configure the URL, run the ad-server authentication command. |
Primary-authentication-server host name |
Name of the primary AD authentication server. To configure the name, run the ad-server authentication host-name command. |
Secondary-authentication-server host name |
Name of the secondary AD authentication server. To configure the name, run the ad-server authentication host-name command. |
Third-authentication-server host name |
Name of the third AD authentication server. To configure the name, run the ad-server authentication host-name command. |
AD-server Ldap port |
LDAP port of an AD server. To configure the function, run the ad-server authentication ldap-port command. |
Bind manager with Base DN |
Whether to attach the Base DN to the administrator DN:
To configure the function, run the ad-server authentication manager-with-base-dn enable command. |
User filter attribute |
User filtering field of a user name. The value of the user filtering field is used as the user name to log in to an AD server. To configure the user filtering field, run the ad-server user-filter command. |
Group filter attribute |
Group filtering field to be obtained. The device uses the value of a group filtering field as the group name to perform authorization. To configure the group filtering field, run the ad-server group-filter command. |
Mobile Number filter attribute |
Mobile phone number filtering field to be obtained. To configure the mobile phone number filtering field, run the ad-server mobile-number-filter command. |
Virtual IP Address filter attribute |
Virtual IP address filtering field. The LDAP server uses this field value to assign virtual IP addresses to network extension users. To configure the virtual IP address filtering field, run the ad-server ip-address-filter command. |
Mask filter attribute |
Subnet mask filtering field corresponding to the virtual IP address. To configure the subnet mask filtering field, run the ad-server ip-address-filter command. |
Bind user when authorization |
Whether to perform user binding during AD authorization. To configure this field, run the ad-server authorization bind-user enable command. |
Source-IP-address, Source-LoopBack, or Source-VLAN |
Source IP address for communicating with the AD server. To configure the source IP address, run the ad-server source command. |