au-ldap-search

This command indicates whether to retrieve the DN with an LDAP search.

Syntax

au-ldap-search { on | off }

Parameters

on
Enables an LDAP search for the user's distinguished name (DN). The login name and LDAP search parameters are used as part of an LDAP search to retrieve the user's DN.
off
Disables an LDAP search for the user's DN. The login name with the LDAP prefix and suffix are used to construct the user's DN. This setting is the default value.

Guidelines

The au-ldap-search command indicates whether to retrieve the distinguished name with an LDAP search.

  • When enabled, use the following command to complete the configuration.
    • The au-ldap-bind-dn command to specify the user's DN.
    • The au-ldap-bind-password command to specify the user's password.
    • The au-ldap-parameters command to associate an LDAP search parameters configuration.
  • When disabled, use the following command to complete the configuration. The provided prefix and suffix form the DN to submit to the LDAP server.
    • The ldap-prefix command to specify the LDAP prefix to add to the user name.
    • The ldap-suffix command to specify the LDAP suffix to append to the user name.

This command is relevant when the authentication method, as defined with the au-method command, is ldap.

Example

Identify LDAP authentication with optional retrieval of the group DN. 
# au-method ldap
# au-server-host ldap-1
# au-server-port 389
# au-ldap-search on
# au-ldap-bind-dn proxyuser
# au-ldap-bind-password p@Ssw0rd