ArubaOS 8.6.0.0 Help Center
You are here: Home > Authentication Servers > Configuring an LDAP Server

Configuring an LDAP Server

The following table describes the parameters that you configure for an LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server.

Table 1: LDAP Server Configuration Parameters

Parameter

Description

Host

IP address of the LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server.

Default: N/A

Admin-dn

Distinguished name for the admin user who has read/search privileges across all the entries in the LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. database (the user does need write privileges, but will be able to search the database, and read attributes of other users in the database).

Admin-passwd

Password for the admin user.

Default: NAAN

Re-type admin-passwd

Re-enter the admin password.

Allow Clear-Text

Allows clear-text (unencrypted) communication with the LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server.

Default: disabled

Auth port

Port number used for authentication.

Default: 389

Base-dn

Distinguished Name of the node that contains the entire user database.

Default: N/A

Filter

A string searches for users in the LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. database. The default filter string is: (objectclass=*).

Default: N/A

Key Attribute

A string searches for a LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server. For Active DirectoryMicrosoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed., the value is sAMAccountName.

Default: sAMAccountName

Timeout

Timeout period of a LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. request, in seconds.

Default: 20 seconds

Mode

Enables or disables the server.

Default: enabled

Preferred Connection Type

Preferred type of connection between a managed device and the LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server. The default order of connection type is:

1. clear-text

2. ldap-s

3. start-tls

The managed device first attempts to contact the LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server using the preferred connection type, and only attempts to use a lower-priority connection type if the first attempt is not successful.

NOTE: If you select clear-text as the preferred connection type, you must also enable the allow-cleartext option.

Maximum number of non-admin connections

Configure the maximum number of non-admin connections to the server.

Default: 4

Chase referral

Chase referrals anonymously.

The following procedure describes how to configure an LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server:

1. In the Mobility Master node hierarchy, navigate to the Configuration > Authentication > Auth Servers tab.

2. To configure an LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server, click + under All Servers. Enter the Name and IP address / hostname of the server. Set the Type to Ldap and click Submit.

3. Select the name of the server created to configure server parameters. Enter parameters as described in Table 1. Select the Mode check box to activate the authentication server.

4. Click Submit.

5. Click Pending Changes.

6. In the Pending Changes window, select the check box and click Deploy changes.

 

The configuration does not take effect until you perform this step.

The following CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command configures an LDAPLightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. server:

(host) [mynode] (config) #aaa authentication-server ldap <name>

host <ipaddr>

(enter parameters as described in Table 1)

enable

/*]]>*/