RSA Security 6.1 manual Modifying Records, Ldapmodify Option Meaning

Page 103

Table 17. Searching for Records Using the ldapsearch Command (Continued)

ldapsearch Option

Meaning

 

 

-s sub

Recursion is to be used starting at the base.

 

 

-T

To make the output more readable, long output lines

 

are not continued on the next line.

 

 

-b

This is the base at which the search operation is to

"radiusclass=Client,o=radius"

begin.

 

 

radiusname=*

This is the criterion which matched objects must

 

satisfy.

 

 

Modifying Records

You can use the ldapmodify command to modify the RSA RADIUS Server configuration.

ldapmodify -c -V2 -h hostname -p 354

-D "cn=oper,o=radius" -w radadmin -f filename

Table 18. Modifying Records Using the ldapmodify Command

ldapmodify Option

Meaning

 

 

-c

The command is to run in continuous mode; do not stop

 

on errors.

 

 

-V2

The version 2 dialect of LDAP is to be used to

 

communicate with the server.

 

NOTE: This option is not required, but specifying it

 

improves the performance of the transaction.

 

 

-hhostname

The name of the host to which this command applies. If

 

none is given, the command is applied to the local

 

database.

 

 

-p 354

TCP port 354 is to be used to communicate with the

 

LDAP interface of the server. The -pvalue must match

 

the TCPPort setting in the [LDAP] section of

 

radius.ini. If the -poption is not specified, the

 

default port number for the RSA RADIUS Server and the

 

LDAP utilities is used (port 389).

 

 

-D "cn=oper,o=radius"

The command is authenticated using an administrative

 

account called oper.

 

NOTE: Any administrative account name may be

 

used in place of oper in the preceding example.

 

o=radius may not be changed.

RSA RADIUS Server 6.1 Administrator’s Guide Using the LDAP Configuration Interface

91

Image 103
Contents RSA Radius Server 6.1 Administrator’s Guide Contact Information Trademarks Distribution Contents Chapter Installing the RSA Radius Server Chapter Administering Profiles Glossary Index Audience About This GuideWhat’s In This Manual Syntax Conventions Requests for Comments RFCs Related DocumentationRSA Radius Server Documentation Vendor InformationThird-Party Products Getting Support and ServiceBefore You Call for Customer Support About RSA Radius Server RSA Radius Server FeaturesAbout RSA Radius Server September RSA Radius Server OverviewRSA Radius Authentication Radius Packets Radius Server Configuration Radius ConfigurationRadius Client Configuration Radius Shared SecretsReplication Secret Radius SecretNode Secret Radius Ports AuthenticationAccounting Comma-Delimited Log Files Accounting SequenceTunneled Accounting Make/Model Field AttributesDictionaries Vendor-Specific AttributesAttribute Lists Checklist AttributesUpdating Attribute Information Return List Attributes Attribute ValuesMulti-Valued Attributes Echo Property Default ValuesOrderable Attributes System Assigned ValuesCentralized Configuration Management Designating a New Primary Radius Server Replacing a Replica Radius ServerChanging the Name or IP Address of a Server Recovering a Replica After a Failed DownloadData Migration/Registration Installing the RSA Radius ServerBefore You Begin Required FilesSystem Requirements Installing on WindowsIf you are installing a Replica RSA Radius Server, click Installing the RSA Radius ServerUninstalling the RSA Radius Server Software Installer Syntax Installing on SolarisPath Reppkg Installing the RSA Radius Server SoftwareEnter RSA administration port Stopping and Starting the Radius Daemon Migration Log File Linux Server System Requirements Installing on LinuxShould be overwritten Installing the RSA Radius Server Software Enter RSA administration port Etc/init.d/sbrd stop # ./uninstallrsa.sh Running RSA Radius Administrator Using RSA Radius AdministratorRSA Radius Administrator Menus Navigating in RSA Radius AdministratorFile Menu Panel Menu See , Administering Radius Clients onWeb Menu RSA Radius Administrator ToolbarHelp Menu Adding an Entry RSA Radius Administrator WindowsSample Add Window Editing an EntrySample Edit Window Cutting/Copying/Pasting RecordsSorting Information Using Context MenusResizing Columns Changing Column SequenceDisplaying Version Information Accessing Online HelpAdding a License Key Add a License for Server Window Exiting the RSA Radius AdministratorRadius Clients Panel Administering Radius ClientsAdd Radius Client Window Adding a Radius ClientSecret to display the characters in the shared secret Deleting a Radius Client Verifying a Shared SecretPage Administering Radius Clients September Adding a Checklist or Return List Attribute for a Profile Administering ProfilesAbout Profiles Resolving Profile and User Attributes Default ProfileAdding a Profile Setting Up ProfilesClick Add to add this attribute/value pair to the list Removing a Profile Administering Profiles September Displaying Statistics Displaying Server Authentication StatisticsStatistics Panel System Authentication Statistics Radius client is sending incorrectly formed packets to Statistics Panel System Accounting Statistics Displaying Server Accounting StatisticsAccounting Statistic Meaning Displaying Radius Client Statistics Resetting Server StatisticsOptionally, sort the messages by clicking a column header Displaying Statistics September Administering Radius Servers Adding a Radius Server Manually Replication PanelAdd Server Window Deleting a Radius Server Enabling a Radius ServerNotifying Replica Radius Servers Publishing Server Configuration InformationDesignating a New Primary Radius Server Recovering a Replica After a Failed DownloadChanging the Name or IP Address of a Server Regenerating a Node Secret Resetting the Radius Database Administering Radius Servers September Logging Using the Radius System LogLogging Files Controlling Log File Size Level of Logging DetailAccounting Log File Format Using the Accounting LogComma Placeholders First Line HeadingsAcct-Status-Type Standard Radius Accounting AttributesAcct-Input-Packets P e n d i x a Ldap Configuration Interface FileLdap Utilities About the Ldap Configuration InterfaceDownloading the Ldap Utilities Ldap RequestsLdap Version Compliance Configuring the Ldap TCP PortAvailable Attributes Ldap Virtual SchemaLdap Schema Slide 2 Ldap Schema Slide 3 Cn=username,o=radius -w passcode cachedPW Unspecified or 0.0.0.0 RAS IP address When you display Searching for Records Ldap Command ExamplesLdapmodify Option Meaning Modifying RecordsWhere Adding Records Deleting Records Counter Statistics Statistics VariablesStattype server Stattype accounting Stattype authenticationRate Statistics Using the Ldap Configuration Interface September AAA GlossaryDNS Tokencode Radius Servers TLS 104 Glossary September Index Tokencode