Brocade Network OS NETCONF Operations Guide v4.1.1 - Manual (Page 253)

Network OS NETCONF Operations Guide 221
53-1003231-02
LDAP
16
The following example removes the mapping between the Brocade admin role and the Active
Directory Administrator group. A Brocade user with the admin role can no longer perform the
operations associated with the Active Directory Administrator group.
<?xml version="1.0" encoding="UTF-8"?>
<rpc message-id="932" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<edit-config>
<target>
<running/>
</target>
<config>
<ldap-server xmlns="urn:brocade.com:mgmt:brocade-aaa">
<maprole>
<group>
<ad-group xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"
operation="delete">Administrator</ad-group>
</group>
</maprole>
</ldap-server>
</config>
</edit-config>
</rpc>
<rpc-reply message-id="932" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<ok/>
</rpc-reply>
Configuring the client to use LDAP/AD for login authentication
After configuring the switch LDAP server list, you must set the authentication mode so that LDAP is
used as the primary source of authentication. Refer to
“Login authentication mode” on page 198
for information on how to configure the login authentication mode.