Dell PowerVault ME5 Series Storage System CLI Reference Guide

PDF

set ldap-parameters


Description	Configures the LDAP server parameters required to authenticate and authorize LDAP users. All unsecured protocols and services must be disabled before the LDAP feature can be enabled. Only secure protocols can be enabled while LDAP is enabled. NOTE:The command does not query specified LDAP servers to ensure that they can be reached. If the server cannot be reached, the user verification will fail. NOTE:Running the restore defaults command will clear the LDAP configuration and other settings. For more information about restoring defaults, see Settings changed by restore defaults. For more information about the LDAP feature, see the Dell PowerVault ME5 Series Administrator's Guide.
Minimum role	manage
Syntax	set ldap-parameters [alt-port <port-number>] [alt-server <server-address>] ldap enabled\|disabled\|on\|off [port <port-number>] [server <server-address>] [user-search-base <search-string>]
Parameters	alt-port <port-number> Optional. Specifies the port to use for communication with the alternate LDAP server. The value can be any valid port in the range 1–65535. The standard ports are 389 and 636. The default is 636. alt-server <server-address> Optional. Specifies the network address of the alternate LDAP server. The value can be an IPv4 address, IPv6 address, or FQDN. This server will listen on the port specified by the alt-port parameter. The alt-server and server parameters cannot be set to the same value. ldap enabled\|disabled\|on\|off Enables or disables use of LDAP. Disabled by default. If you enable this parameter you must specify the server, port, and user-search-base parameters. port <port-number> Optional. Specifies the port to use for communication with the primary LDAP server. The value can be any valid port in the range 1-65535. The standard ports are 389 and 636. The default is 636. server <server-address> Required if the ldap parameter is enabled; otherwise optional. Specifies the network address of the primary LDAP server. The value can be an IPv4 address, IPv6 address, or FQDN. This server will listen on the port specified by the port parameter. The server and alt-server parameters cannot be set to the same value. user-search-base <search-string> Required if the ldap parameter is enabled; otherwise optional. Specifies where to start searching for users in the LDAP directory tree. The search string can include the following attributes, separated by commas: cn=<common-name> ou=<organizational-unit> o=<organization> c=<country> dc=<domain> For more information about LDAP name format, see: https://msdn.microsoft.com/en-us/library/aa366101(v=vs.85).aspx
Examples	Configure the client to connect to the primary LDAP server, and to an alternate LDAP server in case the primary connection fails. The user-search-base setting defines the domain and organizational unit. # set ldap-parameters ldap enabled server 10.235.217.52 port 389 alt-server 10.235.217.51 alt-port 636 user-search-base ou=colo,dc=bigco2,dc=com,dc=local Disable LDAP. # set ldap-parameters ldap off
See also	show ldap-parameters