ldap-server group-filter

Function

The ldap-server group-filter command configures the group filtering field that functions as the group name for an LDAP server.

The undo ldap-server group-filter command restores the default value of the group filtering field that functions as the group name for an LDAP server.

By default, the default value of group filtering field that functions as the group name is ou.

Format

ldap-server group-filter field

undo ldap-server group-filter

Parameters

Parameter	Description	Value
field	Specifies the group filtering field.	The value is a string of 1 to 63 characters. It cannot contain spaces or the following symbols: \, /, < , >, ?, &, \|, ', and ". The configured group filtering field must be the same as that on the server.

Views

LDAP server template view

Default Level

3: Management level

Usage Guidelines

This command configures the group filtering field that functions as the group name for an LDAP server. You can use the value of a group filtering field as the group name.

For example, the LDAP server contains ou=employee. (The group filtering field is ou, and the value of ou is employee.) In this case, run the ldap-server group-filter ou. The device uses the employee as the group name. Do not run this command with the value of the group filtering field. That is, do not run ldap-server group-filter ou=employee.

Example

# Configure group filtering field ou.

<sysname> system-view
[sysname] ldap-server template temp1
[sysname-ldap-temp1] ldap-server group-filter ou