Cisco Systems 4.2 manual set protocol ldap, set Port, set UserPasswordAttribute password, 5-10

Chapter 5 Customizing Your Configuration

Configuring a Remote Server for AA

Step 5 Use the set command to specify the protocol ldap:

set protocol ldap

Step 6 Use the set command to specify the required LDAP properties.

At the very least you must specify:

•IPAddress—the IP address of the LDAP server (for example, 196.168.1.5).

•Port—the port the LDAP server is listening on (for example, 389).

•HostName—the hostname of the machine specified in the IP address field (for example,

ldap1.QuickExample.com).

•SearchPath—the directory in the LDAP database to use as the starting point when searching for user information (for example, o=Ace Industry, c=US).

•Filter—the filter to use to find user entries in the LDAP database (for example, (uid=%s)).

•UserPasswordAttribute—the name of the LDAP attribute in a user entry that contains the user’s password (for example, userpassword).

•BindName—specifies the distinguished name (DN) in the LDAP server for CAR to bind with the LDAP server (for example,

uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot)

•BindPassword—Specifies the password for the distinguished name (for example, cisco123) set IPAddress 196.168.1.5

set Port 389

set HostName ldap1.QuickExample.com set SearchPath "o=Ace Industry, c=US" set Filter (uid=%s)

set UserPasswordAttribute password

set BindName uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot set BindPassword cisco123

See Table 19-1LDAP Service Properties, page 19-2of the Cisco Access Registrar User Guide for descriptions of the other LDAP properties.

Configuring Services

To use LDAP for authorization and/or authentication, you must configure a Services object.

	Installing and Configuring Cisco Access Registrar, 4.2
5-10	OL-17221-02