Nortel Networks 5500 series User Manual

Page 192

Advertising
background image

192

Configuring authentication

Table 37
Configuring LDAP settings (cont’d.)

/cfg/doamin #/aaa/auth #/ldap

followed by:

ldapscert

Specify the certificate number.

enauserpre true|false

Enables or disables storage of user
preferences in an external LDAP/Active
Directory database.

true

—storage and retrieval of user

preferences is enabled. When the client
logs out from a portal session, the Nortel
SNAS saves any user preferences
accumulated during the session in the
isdUserPrefs attribute. The next time the
client successfully logs on through the
portal, the Nortel SNAS retrieves the LDAP
attribute from the LDAP database.

false

—storage and retrieval of user

preferences is disabled.

To support storage and retrieval of user
preferences, you must extend the LDAP server
schema with one new ObjectClass and one
new Attribute. For more information, see

“Adding User Preferences attribute to Active
Directory” (page 485)

.

The default is false.

enacutdomain true|false

Enables or disables the cut domain from the
user name.

timeout <interval>

Sets the timeout interval for a connection
request to an LDAP server. At the end of the
timeout period, if no connection has been
established, authentication will fail.

interval

is an integer that indicates

the time interval in seconds (s), minutes
(m), or hours (h). If you do not specify a
measurement unit, seconds is assumed.
The range is 1–10000 seconds. The default
is 5 seconds.

activedire

Accesses the Active Directory menu, in order
to manage client passwords (see

“Managing

Active Directory passwords” (page 198)

).

Nortel Secure Network Access Switch

Using the Command Line Interface

NN47230-100

03.01

Standard

28 July 2008

Copyright © 2007, 2008 Nortel Networks

.

Advertising
This manual is related to the following products: