H3C Technologies H3C S12500-X Series Switches - Manual (Page 51)

39
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter LDAP server view. ldap server server-name N/A
3. Specify the LDAP version. protocol-version { v2 | v3 }
By default, LDAPv3 is used.
A Microsoft LDAP server supports only
LDAPv3.
385B
Setting the LDAP server timeout period
If the device sends a bind or search request to an LDAP server but does not receive a response from the
server within the LDAP server timeout period, the device considers that the authentication or authorization
request has timed out and tries the backup authentication or authorization method. If no backup method
is configured in the ISP domain, the device considers the authentication or authorization attempt a
failure.
To set the LDAP server timeout period:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter LDAP server view. ldap server server-name N/A
3. Set the LDAP server timeout
period.
server-timeout time-interval
By default, the LDAP server timeout
period is 10 seconds.
386B
Configuring administrator attributes
To configure the administrator DN and password for binding with the LDAP server during LDAP
authentication:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter LDAP server view. ldap server server-name N/A
3. Specify the administrator
DN.
login-dn dn-string
By default, no administrator DN is
specified.
The administrator DN specified on the
device must be the same as
configured on the LDAP server.
4. Configure the
administrator password. login-password { cipher | simple }
password By default, no administrator
password is specified.
387B
Configuring LDAP user attributes
To authenticate a user, an LDAP client must establish a connection to the LDAP server, obtain the user DN
from the LDAP server, and use the user DN and the user's password to bind with the LDAP server.
According to the LDAP DN search mechanism, an LDAP client sends search requests to the server based
on the search policy determined by the LDAP user attributes of the LDAP client.
The LDAP user attributes include:
• Search base DN