H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 59)

45
The LDAP user attributes are as follows:
• Search base DN
• Search scope
• User group attribute
• Username attribute
• Username format
• User object class
If the user group attribute is configured on the LDAP server, the user group attribute setting on the device
must match that on the LDAP server.
To configure LDAP user attributes:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter LDAP scheme view. ldap scheme ldap-scheme-name N/A
3. Specify the user search base
DN. user-parameters search-base-dn
base-dn
Not specified by default.
4. Specify the user search scope. user-parameters search-scope
{ all-level | single-level }
Optional.
The default setting is all-level.
5. Specify the required user
group attribute.
user-parameters
user-group-attribute
attribute-name
Optional.
By default, no user group attribute
is specified, and the default user
group attribute defined on the
LDAP server is used.
6. Specify the username
attribute.
user-parameters
user-name-attribute
{ name-attribute | cn | uid }
Optional.
The default setting is cn.
7. Specify the username format.
user-parameters
user-name-format { with-domain |
without-domain }
Optional.
The default setting is
without-domain.
8. Specify the user object class. user-parameters user-object-class
object-class-name
Optional.
By default, no user object class is
specified, and the default user
object class on the LDAP server is
used. The default user object class
varies by device.