ldap-server authentication base-dn

Function

The ldap-server authentication base-dn command configures the Base DN of an LDAP authentication server.

The undo ldap-server authentication base-dn command restores the default Base DN of an LDAP authentication server.

By default, the Base DN of an LDAP authentication server is dc=my-domain, dc=com.

ldap-server authentication base-dn base-dn

undo ldap-server authentication base-dn base-dn

Parameter	Description	Value
base-dn	Specifies the Base DN of an LDAP authentication server.	The value is a string of 1 to 127 characters excluding question marks (?). When a character string contains spaces, the character string must be quoted with double quotation marks. The length ranges from 3 to 129. In dual-system hot backup networking, the Base DN cannot contain the percent sign (%). NOTE: The value supports multiple languages, including ASCII characters such as the English and non-ASCII characters such as Chinese, German, and French. You can use a command editor of the GBK or UTF-8 encoding format to edit characters. For details about how to switch the encoding format of the system and related precautions, see the language character-set utf-8 command. The encoding format used by the client through which users access the network needs to be the same as that used by the device. Otherwise, users may fail to go online or the user name is displayed as garbled characters. After the encoding format is switched, if the user names of some users among the original online users contain non-ASCII characters, these user names are displayed as garbled characters.

LDAP server template view

3: Management level

To add multiple Base DNs, repeat this command. A maximum of four Base DNs can be configured.

# Configure the Base DN of an LDAP authentication server to cn.

<sysname> system-view
[sysname] ldap-server template temp1
[sysname-ldap-temp1] ldap-server authentication base-dn cn