< Home

display ldap-server template

Function

The display ldap-server template command displays the configurations of an LDAP server template.

Format

display ldap-server template [ template-name ]

Parameters

Parameter Description Value

template-name

Specifies the name of an LDAP server template.

The value must be an existing LDAP server template name.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

If no template is specified, the configurations of all LDAP servers are displayed.

Example

# Display the configurations of an LDAP server.

<sysname> display ldap-server template
  -------------------------------------------------------------------
  Server-template-name                :  test
  Server-type                         :  AD
  Base DN                             :  dc=my-domain,dc=com
  Administrator anonymous bind        :  No
  Manager DN                          :  cn=administrator
  Manager password                    :  %@%@evxcUY"TM)4C|mK75"#A-V#/%@%@
  Bind manager with Base DN           :  Yes
  User filter attribute               :  cn
  Group filter attribute              :  ou
  Mobile Number filter attribute      :  telephoneNumber
  Virtual IP Address filter attribute :  VIP
  Mask filter attribute               :  VIPMask
  Primary-authentication-server       :  10.1.1.1:389
  Secondary-authentication-server     :  -:0
  Third-authentication-server         :  -:0
  Bind user when authorization        :  Yes
  Source-IP-address                   :  -                                                                                             Source-LoopBack                     :  -                                                                                             Source-VLAN                         :  - 
  Authen filter attribute             :  (memberof=cn=a,ou=users,dc=test,dc=com)
  Server response timeout             :  15
  -------------------------------------------------------------------
  Total of LDAP template :1
Table 1 Description of the display ldap-server template command output

Item

Description

Server-template-name

Name of an LDAP server template. To configure the name, run the ldap-server template command.

Server-type

Type of an LDAP server. To configure the type, run the ldap-server server-type command.

Base DN

Base DN of an LDAP server. To configure the Base DN, run the ldap-server authentication base-dn command.

Administrator anonymous bind

Whether to allow the administrator to access an LDAP server anonymously:
  • Yes: allows the administrator to access the LDAP server anonymously.

  • No: prohibits the administrator from accessing the LDAP server anonymously.

To configure the function, run the ldap-server authentication manager-anonymous enable command.

Manager DN

Administrator Base DN for accessing an LDAP server. To configure the administrator Base DN, run the ldap-server authentication manager command.

Manager password

Administrator password for accessing an LDAP server. To configure the administrator password, run the ldap-server authentication manager command.

Bind manager with Base DN

Whether to attach the Base DN to the administrator DN:

  • Yes: attaches the Base DN to the administrator DN.

  • No: does not attach the Base DN to the administrator DN.

To configure the function, run the ldap-server authentication manager-with-base-dn enable command.

User filter attribute

User filtering field of a user name. The value of the user filtering field is used as the user name to log in to an LDAP server. To configure the user filtering field, run the ldap-server user-filter command.

Group filter attribute

Group filtering field to be obtained. The device uses the value of a group filtering field as the group name to perform authorization. To configure the group filtering field, run the ldap-server group-filter command.

Mobile Number filter attribute

Mobile phone number filtering field to be obtained. To configure the mobile phone number filtering field, run the ldap-server mobile-number-filter command.

Virtual IP Address filter attribute

Virtual IP address filtering field. The LDAP server uses this field value to assign virtual IP addresses to network extension users.

Mask filter attribute

Subnet mask filtering field corresponding to the virtual IP address.

Primary-authentication-server

IP address and port of the primary LDAP server. To configure the IP address and port, run the ldap-server authentication command.

Secondary-authentication-server

IP address and port of the secondary LDAP server. To configure the IP address and port, run the ldap-server authentication command.

Third-authentication-server

IP address and port of the third LDAP server. To configure the IP address and port, run the ldap-server authentication command.

Bind user when authorization

Whether to perform user binding during LDAP authorization. To configure this field, run the ldap-server authorization bind-user enable command.

Source-IP-address, Source-LoopBack, or Source-VLAN

Source IP address for communicating with the LDAP server. To configure the source IP address, run the ldap-server source command.

Authen filter attribute

Authentication filtering field of the LDAP server. To configure the authentication filtering field, run the ldap-server authentication-filter command.

Server response timeout

Server response timeout duration, in seconds. This parameter is configured using the ldap-server response-timeout command.

NOTE:

This parameter is supported in V600R007C20SPC500 and later versions.

Total of LDAP template

Total number of LDAP server templates.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >